MediaTek, Inc. MediaTek chipset

• CVE-2026-20504 Medium 5.3 In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no 0.3%
• CVE-2026-20503 Medium 5.3 In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no 0.3%
• CVE-2026-20502 High 8.4 In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not 0.2%
• CVE-2026-20501 High 8.4 In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not 0.2%
• CVE-2026-20500 Medium 5.0 In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitati 0.1%
• CVE-2026-20498 Medium 6.0 In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privi 0.2%
• CVE-2026-20496 Medium 4.4 In geniezone, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User 0.1%
• CVE-2026-20495 High 7.8 In Bluetooth driver, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction i 0.1%
• CVE-2026-20494 Medium 5.5 In wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User inte 0.1%
• CVE-2026-20493 Medium 4.4 In wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interact 0.1%
• CVE-2026-20492 Medium 5.5 In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This could lead to local denial of service with User execution privileges needed. User interaction is not needed 0.1%
• CVE-2026-20491 Medium 5.5 In med, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for e 0.1%
• CVE-2026-20490 Medium 4.4 In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interacti 0.1%
• CVE-2026-20489 Medium 4.4 In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User 0.2%
• CVE-2026-20488 Medium 4.4 In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. Us 0.2%
• CVE-2026-20486 Medium 6.7 In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. Us 0.2%
• CVE-2026-20485 Medium 6.0 In HFRP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User in 0.2%
• CVE-2026-20484 Medium 4.4 In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. Us 0.2%
• CVE-2026-20470 Medium 6.2 In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interac 0.2%
• CVE-2026-20483 High 7.7 In Telephony, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User inter 0.2%
• CVE-2026-20482 Medium 6.5 In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote (proximal/adjacent) denial of service with no additional execution privileges needed. User in 0.3%
• CVE-2026-20481 Medium 6.0 In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. Us 0.2%
• CVE-2026-20497 Medium 6.0 In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. Us 0.2%
• CVE-2026-20480 Medium 5.5 In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. User interaction is not needed fo 0.1%
• CVE-2026-20479 High 7.5 In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, w 0.7%
• CVE-2026-20478 Medium 5.5 In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. User interaction is not needed fo 0.1%
• CVE-2026-20477 Medium 6.0 In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User 0.2%
• CVE-2026-20476 Medium 5.5 In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for expl 0.1%
• CVE-2026-20475 Medium 6.0 In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User 0.2%
• CVE-2026-20474 Medium 6.0 In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User i 0.1%
• CVE-2026-20473 Medium 6.0 In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interacti 0.2%
• CVE-2026-20472 Medium 4.4 In TFA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interacti 0.1%
• CVE-2026-20471 Medium 4.6 In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service, if an attacker has physical access to the device, with no additional execution 0.2%
• CVE-2026-20469 Medium 5.8 In trusted_mem, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System priv 0.1%
• CVE-2026-20468 Medium 6.0 In apusys, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User i 0.2%
• CVE-2026-20467 Medium 6.0 In apusys, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. U 0.2%
• CVE-2026-20466 Medium 6.1 In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no addi 0.2%
• CVE-2026-20465 High 8.1 In wlan AP driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges 0.3%
• CVE-2026-20464 Medium 6.5 In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege if a malicious actor has already obtained the System privilege. U 0.5%
• CVE-2026-20463 Medium 6.7 In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User 0.2%
• CVE-2026-20462 Medium 6.7 In Telephony, there is a possible memory corruption due to a heap buffer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User 0.2%
• CVE-2026-20461 Medium 5.3 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, 0.3%
• CVE-2026-20460 Medium 5.3 In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure, if a UE has connected to a rogue base station controlled by the 0.3%
• CVE-2026-20459 Medium 5.3 In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with 0.3%
• CVE-2026-20458 High 7.5 In Modem, there is a possible memory corruption due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attack 0.3%
• CVE-2026-20457 Medium 5.3 In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with 0.3%
• CVE-2026-20456 Medium 5.5 In wlan STA driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for 0.1%
• CVE-2026-20455 High 7.8 In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. Us 0.1%
• CVE-2026-20454 Medium 6.4 In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User int <0.1%
• CVE-2026-20453 Medium 6.7 In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. Us 0.1%