MediaTek, Inc. MediaTek chipset

• CVE-2026-68591 Medium 6.7 In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege (EoP) if a malicious actor has already obtained the System privilege 0.1%
• CVE-2026-68590 Medium 5.3 In ip_stack, there is a possible out of bounds read due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attac 0.2%
• CVE-2026-68589 Medium 6.7 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User i 0.1%
• CVE-2026-68588 Medium 5.3 In Modem, there is a possible way (for XXX) to XXXXX due to an integer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, 0.2%
• CVE-2026-20600 Medium 5.3 In Modem, there is a possible application crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no add 0.2%
• CVE-2026-20599 Medium 6.7 In Modem, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege 0.1%
• CVE-2026-20598 Medium 5.3 In Modem, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with 0.2%
• CVE-2026-20597 Medium 5.3 In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, w 0.2%
• CVE-2026-20596 Medium 5.3 In Modem, there is a possible out of bounds read due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker 0.2%
• CVE-2026-20595 Medium 6.7 In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. U 0.1%
• CVE-2026-20594 Medium 5.3 In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, w 0.2%
• CVE-2026-20593 Medium 5.3 In Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, 0.2%
• CVE-2026-20592 Medium 4.1 In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to local information disclosure if a malicious actor has already obtained the System pr <0.1%
• CVE-2026-20591 High 8.4 In GPU pdma, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User intera 0.1%
• CVE-2026-20590 Medium 4.4 In display, there is a possible system crash due to a logic error. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not ne 0.1%
• CVE-2026-20585 High 7.5 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the atta 0.2%
• CVE-2026-20584 Medium 6.7 In usb, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User inter 0.1%
• CVE-2026-20583 Medium 4.4 In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not neede 0.1%
• CVE-2026-20582 Medium 6.7 In usb, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is n 0.1%
• CVE-2026-20581 Medium 6.7 In usb, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction i 0.1%
• CVE-2026-20580 Medium 4.4 In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not neede 0.1%
• CVE-2026-20578 Medium 5.3 In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled b 0.2%
• CVE-2026-20577 Medium 4.4 In Modem, there is a possible permission bypass due to a permissions bypass. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction 0.1%
• CVE-2026-20576 Medium 6.7 In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User int 0.1%
• CVE-2026-20575 Medium 6.7 In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction i 0.1%
• CVE-2026-20574 Medium 6.7 In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction i 0.1%
• CVE-2026-20573 Medium 6.7 In afe, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is n 0.1%
• CVE-2026-20572 Medium 6.7 In adsp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User inter 0.1%
• CVE-2026-20571 Medium 6.7 In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction i 0.1%
• CVE-2026-20570 Medium 6.7 In adsp, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User intera 0.1%
• CVE-2026-20569 Medium 6.7 In adsp, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction 0.1%
• CVE-2026-20568 Medium 6.7 In afe, there is a possible system crash due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not 0.1%
• CVE-2026-20567 Medium 6.7 In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User int 0.1%
• CVE-2026-20566 Medium 4.8 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, 0.2%
• CVE-2026-20565 High 8.4 In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is 0.1%
• CVE-2026-20564 Medium 6.2 In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not n 0.1%
• CVE-2026-20563 Medium 5.3 In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacke 0.2%
• CVE-2026-20562 Medium 5.3 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, 0.2%
• CVE-2026-20561 Medium 5.3 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, 0.2%
• CVE-2026-20560 Medium 5.3 In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with 0.2%
• CVE-2026-20559 High 7.8 In GPU pdma, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exp 0.1%
• CVE-2026-20558 High 8.4 In GPU pdma, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not 0.1%
• CVE-2026-20557 High 7.5 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the atta 0.2%
• CVE-2026-20556 High 7.5 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the atta 0.2%
• CVE-2026-20555 Medium 5.3 In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, w 0.2%
• CVE-2026-20554 High 7.1 In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, w 0.2%
• CVE-2026-20553 Medium 6.8 In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional exe 0.2%
• CVE-2026-20552 Medium 6.5 In ccci, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed f 0.4%
• CVE-2026-20551 Medium 5.5 In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed fo 0.1%
• CVE-2026-20550 Medium 6.2 In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed fo 0.1%