MediaTek, Inc. MediaTek chipset

• CVE-2026-20549 High 7.5 In Modem, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the a 0.2%
• CVE-2026-20548 High 7.5 In Modem, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacke 0.2%
• CVE-2026-20547 High 7.5 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the atta 0.2%
• CVE-2026-20546 High 7.5 In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the a 0.2%
• CVE-2026-20545 High 7.5 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the atta 0.2%
• CVE-2026-20499 High 7.5 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the atta 0.2%
• CVE-2026-20543 Medium 5.5 In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not neede 0.1%
• CVE-2026-20542 Medium 6.7 In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interactio 0.1%
• CVE-2026-20541 Medium 5.3 In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacke 0.2%
• CVE-2026-20540 Medium 5.3 In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, w 0.2%
• CVE-2026-20539 Medium 5.3 In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, w 0.2%
• CVE-2026-20538 Medium 5.3 In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacke 0.2%
• CVE-2026-20537 Medium 6.7 In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction 0.1%
• CVE-2026-20536 Medium 6.7 In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction 0.1%
• CVE-2026-20535 Medium 6.7 In aidl, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. 0.1%
• CVE-2026-20534 Medium 5.3 In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker 0.2%
• CVE-2026-20533 Medium 6.7 In display, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. Use 0.1%
• CVE-2026-20532 Medium 6.2 In apu, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploita 0.1%
• CVE-2026-20531 High 8.4 In apu, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for 0.1%
• CVE-2026-20530 Medium 6.7 In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User 0.1%
• CVE-2026-20529 Medium 6.7 In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User 0.1%
• CVE-2026-20528 Medium 6.7 In ccci, there is a possible out of bounds write and read due to a missing bounds check. This could lead to local information disclosure, memory corruption, crashes, or privilege escalation if a malic 0.1%
• CVE-2026-20544 Medium 6.8 In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional e 0.2%
• CVE-2026-20588 Medium 6.7 In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. Use 0.1%
• CVE-2026-20587 Medium 6.7 In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User intera 0.1%
• CVE-2026-20579 Medium 6.7 In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interactio 0.1%
• CVE-2026-20527 Medium 5.3 In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no 0.2%
• CVE-2026-20526 High 7.1 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the atta 0.2%
• CVE-2026-20525 Medium 5.3 In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with 0.2%
• CVE-2026-20524 High 8.4 In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not 0.1%
• CVE-2026-20523 High 8.4 In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction 0.1%
• CVE-2026-20522 High 8.4 In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction 0.1%
• CVE-2026-20521 High 8.4 In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interacti 0.1%
• CVE-2026-20589 Medium 6.7 In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interactio 0.1%
• CVE-2026-20586 High 8.8 In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is ne 0.4%
• CVE-2026-20520 High 7.5 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the atta 0.2%
• CVE-2026-20519 High 7.5 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the atta 0.2%
• CVE-2026-20518 Medium 4.2 In geniezone, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. 0.1%
• CVE-2026-20517 Medium 6.7 In geniezone, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User i 0.2%
• CVE-2026-20515 Medium 5.0 In gpu, there is a possible system crash due to use after free. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation. Patc 0.1%
• CVE-2026-20514 Medium 4.4 In Audio HAL, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privile 0.2%
• CVE-2026-20513 Medium 4.4 In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privileg 0.2%
• CVE-2026-20512 Medium 6.7 In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privil 0.2%
• CVE-2026-20511 Medium 6.7 In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User in 0.2%
• CVE-2026-20510 Medium 6.7 In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. U 0.2%
• CVE-2026-20509 Medium 6.7 In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. Us 0.2%
• CVE-2026-20508 Medium 6.7 In Power HAL, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User i 0.2%
• CVE-2026-20507 Medium 6.7 In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User i 0.2%
• CVE-2026-20506 Medium 6.7 In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User i 0.2%
• CVE-2026-20516 Medium 5.5 In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privileges needed. User interaction is not need 0.1%