Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| Unknown | n/a | CVE-2026-99060 |
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7603: initialize global station WCID
mt7603 uses a driver-private global station WCID for...
Linux, MediaTek, Inc.Linux, Linux kernel, MediaTek, Inc. MT7603
|
NVD | |||
|
CVE-2026-99060In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7603: initialize global station WCID
mt7603 uses a driver-private global station WCID for...
Executive summaryA flaw in the Linux kernel's driver for MediaTek MT7603 wireless chips can cause a crash when frames are injected through a monitor interface. The advisory describes it as a NULL pointer dereference fixed by initializing a global station entry before it is used. The advisory does not state a severity score, and the fix is a kernel stable tree patch that users should apply through their kernel updates. Technical summaryThe vulnerability is a NULL pointer dereference caused by an uninitialized sk_buff_head in the mt7603 driver's driver-private global station WCID. The advisory says the first frame injected through a monitor interface reaches __skb_queue_tail() with an uninitialized queue, which was made reachable by commit 0335c034e726. The fix calls mt76_wcid_init() on the global WCID in mt7603_mac_init() in drivers/net/wireless/mediatek/mt76/mt7603/init.c. The advisory does not state a CVSS score, an attack vector beyond local injection through a monitor interface, affected or fixed kernel version numbers, workarounds, or exploitation status. Detection guidance is not stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from git.kernel.org/stable/c/19d6fa087dcf242…5828b8282d4040bad168 ScoreNo CVSS score published. Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Unknown | n/a | CVE-2026-98958 |
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: account non-AQL frames per peer rather than per link
The driver increments...
Linux, MediaTek, Inc.Linux, Linux kernel, MediaTek, Inc. mt76
|
NVD | |||
|
CVE-2026-98958In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: account non-AQL frames per peer rather than per link
The driver increments...
Executive summaryThe advisory describes a fix in the Linux kernel's mt76 wireless driver for MediaTek Wi-Fi chipsets, where a packet counter could drift upward on multi-link peers and eventually block a station from transmitting. The advisory does not state a severity rating, and the patch is presented as a resolved kernel fix. The advisory does not give an explicit recommendation beyond the referenced commit. Technical summaryThe flaw is a counter accounting error in the mt76 Wi-Fi driver: the increment of wcid->non_aql_packets and its decrement on completion could land on different link wcids for MLO peers, so the count grows until the station is blocked, which the advisory frames as a denial-of-service style condition. The fix keeps the counter on the primary link's wcid via a new helper, mt76_wcid_primary(), in mt76.h and tx.c. The advisory cites the fixed commit 752770d7a58c821c17909c3ca67f9f14ab146a40 and the Fixes tag 86c051f2c418, but it does not state affected or fixed kernel version ranges, a CVSS score, an attack vector or required privileges, exploitation status, or workarounds. Detection guidance is not stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from git.kernel.org/stable/c/752770d7a58c821…9c3ca67f9f14ab146a40 ScoreNo CVSS score published. Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Unknown | n/a | CVE-2026-98957 |
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7915: disable rx napi when removing device
Unloading the mt7915e module with a MT7916...
Linux, MediaTek, Inc.Linux, Linux kernel, MediaTek, Inc. mt7915
|
NVD | |||
|
CVE-2026-98957In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7915: disable rx napi when removing device
Unloading the mt7915e module with a MT7916...
Executive summaryThe advisory describes a Linux kernel fix for the mt76 mt7915 WiFi driver, which affects systems using MediaTek MT7915 and MT7916 wireless hardware. The advisory does not state a severity rating, and it describes the problem as warnings and system instability when the module is unloaded and reloaded. The fix is a kernel patch that disables receive NAPI processing when the device is removed. Technical summaryThe flaw is a resource-handling bug in the mt7915 driver: the driver destroys receive NAPI contexts without first disabling them, which triggers kernel warnings in __netif_napi_del_locked() and page_pool_disable_direct_recycling() when the mt7915e module is unloaded with an MT7916 device. The advisory states that the system generally becomes unstable after the module is reinserted. The patch adds a loop in mt7915_stop_hardware() that calls napi_disable() on each non-WED-RRO receive queue, and the advisory says the tx side is handled by the generic mt76 code. The advisory does not state a CVSS score, attack vector or required privileges, exploitation status, affected or fixed version numbers, or workarounds. Detection guidance is not stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from git.kernel.org/stable/c/0281dac1e213329…b02e612de7f1477a52d7 ScoreNo CVSS score published. Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.7 | CVE-2026-20589 |
In venc, there is a possible out of bounds write due to type confusion
MediaTek, Inc.MediaTek, Inc. MediaTek chipset, MediaTek, Inc. Mt6833 Firmware, MediaTek, Inc. Mt6855 Firmware, MediaTek, Inc. Mt6877 Firmware, MediaTek, Inc. Mt2718 Firmware, MediaTek, Inc. Mt6768 Firmware, MediaTek, Inc. Mt6769 Firmware, MediaTek, Inc. Mt6789 Firmware, MediaTek, Inc. Mt8188 Firmware, MediaTek, Inc. Mt8189 Firmware, MediaTek, Inc. Mt8186 Firmware, MediaTek, Inc. Mt8195 Firmware
|
NVD | |||
|
CVE-2026-20589In venc, there is a possible out of bounds write due to type confusion
From the advisoryIn venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9606. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H AffectsMediaTek, Inc.MediaTek, Inc. MediaTek chipsetMediaTek, Inc. Mt6833 FirmwareMediaTek, Inc. Mt6855 FirmwareMediaTek, Inc. Mt6877 FirmwareMediaTek, Inc. Mt2718 FirmwareMediaTek, Inc. Mt6768 FirmwareMediaTek, Inc. Mt6769 FirmwareMediaTek, Inc. Mt6789 FirmwareMediaTek, Inc. Mt8188 FirmwareMediaTek, Inc. Mt8189 FirmwareMediaTek, Inc. Mt8186 FirmwareMediaTek, Inc. Mt8195 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.7 | CVE-2026-20588 |
In mtee, there is a possible escalation of privilege due to a missing bounds check
MediaTek, Inc.MediaTek, Inc. MediaTek chipset, MediaTek, Inc. Mt6833 Firmware, MediaTek, Inc. Mt6855 Firmware, MediaTek, Inc. Mt6877 Firmware, MediaTek, Inc. Mt2718 Firmware, MediaTek, Inc. Mt6768 Firmware, MediaTek, Inc. Mt6769 Firmware, MediaTek, Inc. Mt6789 Firmware, MediaTek, Inc. Mt8188 Firmware, MediaTek, Inc. Mt8189 Firmware, MediaTek, Inc. Mt8186 Firmware, MediaTek, Inc. Mt8195 Firmware
|
NVD | |||
|
CVE-2026-20588In mtee, there is a possible escalation of privilege due to a missing bounds check
From the advisoryIn mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9607. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H AffectsMediaTek, Inc.MediaTek, Inc. MediaTek chipsetMediaTek, Inc. Mt6833 FirmwareMediaTek, Inc. Mt6855 FirmwareMediaTek, Inc. Mt6877 FirmwareMediaTek, Inc. Mt2718 FirmwareMediaTek, Inc. Mt6768 FirmwareMediaTek, Inc. Mt6769 FirmwareMediaTek, Inc. Mt6789 FirmwareMediaTek, Inc. Mt8188 FirmwareMediaTek, Inc. Mt8189 FirmwareMediaTek, Inc. Mt8186 FirmwareMediaTek, Inc. Mt8195 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.7 | CVE-2026-20587 |
In mtee, there is a possible escalation of privilege due to type confusion
MediaTek, Inc.MediaTek, Inc. MediaTek chipset, MediaTek, Inc. Mt6833 Firmware, MediaTek, Inc. Mt6855 Firmware, MediaTek, Inc. Mt6877 Firmware, MediaTek, Inc. Mt2718 Firmware, MediaTek, Inc. Mt6768 Firmware, MediaTek, Inc. Mt6769 Firmware, MediaTek, Inc. Mt6789 Firmware, MediaTek, Inc. Mt8188 Firmware, MediaTek, Inc. Mt8189 Firmware, MediaTek, Inc. Mt8186 Firmware, MediaTek, Inc. Mt8195 Firmware
|
NVD | |||
|
CVE-2026-20587In mtee, there is a possible escalation of privilege due to type confusion
From the advisoryIn mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9608. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H AffectsMediaTek, Inc.MediaTek, Inc. MediaTek chipsetMediaTek, Inc. Mt6833 FirmwareMediaTek, Inc. Mt6855 FirmwareMediaTek, Inc. Mt6877 FirmwareMediaTek, Inc. Mt2718 FirmwareMediaTek, Inc. Mt6768 FirmwareMediaTek, Inc. Mt6769 FirmwareMediaTek, Inc. Mt6789 FirmwareMediaTek, Inc. Mt8188 FirmwareMediaTek, Inc. Mt8189 FirmwareMediaTek, Inc. Mt8186 FirmwareMediaTek, Inc. Mt8195 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 8.8 | CVE-2026-20586 |
In vdec, there is a possible out of bounds write due to a missing bounds check
MediaTek, Inc.MediaTek, Inc. MediaTek chipset, MediaTek, Inc. Mt6833 Firmware, MediaTek, Inc. Mt6855 Firmware, MediaTek, Inc. Mt6877 Firmware, MediaTek, Inc. Mt8910 Firmware, MediaTek, Inc. Mt2718 Firmware, MediaTek, Inc. Mt6768 Firmware, MediaTek, Inc. Mt6769 Firmware, MediaTek, Inc. Mt6789 Firmware, MediaTek, Inc. Mt8188 Firmware, MediaTek, Inc. Mt8189 Firmware, MediaTek, Inc. Mt8186 Firmware
|
NVD | |||
|
CVE-2026-20586In vdec, there is a possible out of bounds write due to a missing bounds check
From the advisoryIn vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H AffectsMediaTek, Inc.MediaTek, Inc. MediaTek chipsetMediaTek, Inc. Mt6833 FirmwareMediaTek, Inc. Mt6855 FirmwareMediaTek, Inc. Mt6877 FirmwareMediaTek, Inc. Mt8910 FirmwareMediaTek, Inc. Mt2718 FirmwareMediaTek, Inc. Mt6768 FirmwareMediaTek, Inc. Mt6769 FirmwareMediaTek, Inc. Mt6789 FirmwareMediaTek, Inc. Mt8188 FirmwareMediaTek, Inc. Mt8189 FirmwareMediaTek, Inc. Mt8186 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.7 | CVE-2026-20579 |
In vdec, there is a possible out of bounds write due to type confusion
MediaTek, Inc.MediaTek, Inc. MediaTek chipset, MediaTek, Inc. Mt6833 Firmware, MediaTek, Inc. Mt6855 Firmware, MediaTek, Inc. Mt6877 Firmware, MediaTek, Inc. Mt2718 Firmware, MediaTek, Inc. Mt6768 Firmware, MediaTek, Inc. Mt6769 Firmware, MediaTek, Inc. Mt6789 Firmware, MediaTek, Inc. Mt8188 Firmware, MediaTek, Inc. Mt8189 Firmware, MediaTek, Inc. Mt8186 Firmware, MediaTek, Inc. Mt8195 Firmware
|
NVD | |||
|
CVE-2026-20579In vdec, there is a possible out of bounds write due to type confusion
From the advisoryIn vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9800. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H AffectsMediaTek, Inc.MediaTek, Inc. MediaTek chipsetMediaTek, Inc. Mt6833 FirmwareMediaTek, Inc. Mt6855 FirmwareMediaTek, Inc. Mt6877 FirmwareMediaTek, Inc. Mt2718 FirmwareMediaTek, Inc. Mt6768 FirmwareMediaTek, Inc. Mt6769 FirmwareMediaTek, Inc. Mt6789 FirmwareMediaTek, Inc. Mt8188 FirmwareMediaTek, Inc. Mt8189 FirmwareMediaTek, Inc. Mt8186 FirmwareMediaTek, Inc. Mt8195 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.8 | CVE-2026-20544 |
In meta, there is a possible out of bounds write due to a missing bounds check
MediaTek, Inc.MediaTek, Inc. MediaTek chipset, MediaTek, Inc. Mt6835 Firmware, MediaTek, Inc. Mt6853 Firmware, MediaTek, Inc. Mt6855 Firmware, MediaTek, Inc. Mt8910 Firmware, MediaTek, Inc. Mt6768 Firmware, MediaTek, Inc. Mt6769 Firmware, MediaTek, Inc. Mt6781 Firmware, MediaTek, Inc. Mt6789 Firmware, MediaTek, Inc. Mt6761 Firmware, MediaTek, Inc. Mt6765 Firmware, MediaTek, Inc. Mt6739 Firmware
|
NVD | |||
|
CVE-2026-20544In meta, there is a possible out of bounds write due to a missing bounds check
From the advisoryIn meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11049530 / ALPS11480843; Issue ID: MSV-7935. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H AffectsMediaTek, Inc.MediaTek, Inc. MediaTek chipsetMediaTek, Inc. Mt6835 FirmwareMediaTek, Inc. Mt6853 FirmwareMediaTek, Inc. Mt6855 FirmwareMediaTek, Inc. Mt8910 FirmwareMediaTek, Inc. Mt6768 FirmwareMediaTek, Inc. Mt6769 FirmwareMediaTek, Inc. Mt6781 FirmwareMediaTek, Inc. Mt6789 FirmwareMediaTek, Inc. Mt6761 FirmwareMediaTek, Inc. Mt6765 FirmwareMediaTek, Inc. Mt6739 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 5.5 | CVE-2026-20543 |
In Modem, there is a possible information disclosure due to a logic error
MediaTek, Inc.MediaTek, Inc. MediaTek chipset, MediaTek, Inc. Mt2716 Firmware, MediaTek, Inc. Mt2735 Firmware, MediaTek, Inc. Mt2737 Firmware, MediaTek, Inc. Mt6768 Firmware, MediaTek, Inc. Mt6769 Firmware, MediaTek, Inc. Mt6761 Firmware, MediaTek, Inc. Mt6765 Firmware, MediaTek, Inc. Mt6739 Firmware, MediaTek, Inc. Mt6762 Firmware, MediaTek, Inc. Mt6763 Firmware, MediaTek, Inc. Mt6767 Firmware
|
NVD | |||
|
CVE-2026-20543In Modem, there is a possible information disclosure due to a logic error
From the advisoryIn Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01645293; Issue ID: MSV-6761. Impact if exploitedConfidentialityHigh IntegrityNone AvailabilityNone
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N AffectsMediaTek, Inc.MediaTek, Inc. MediaTek chipsetMediaTek, Inc. Mt2716 FirmwareMediaTek, Inc. Mt2735 FirmwareMediaTek, Inc. Mt2737 FirmwareMediaTek, Inc. Mt6768 FirmwareMediaTek, Inc. Mt6769 FirmwareMediaTek, Inc. Mt6761 FirmwareMediaTek, Inc. Mt6765 FirmwareMediaTek, Inc. Mt6739 FirmwareMediaTek, Inc. Mt6762 FirmwareMediaTek, Inc. Mt6763 FirmwareMediaTek, Inc. Mt6767 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.7 | CVE-2026-20542 |
In apusys, there is a possible memory corruption due to use after free
MediaTek, Inc.MediaTek, Inc. MediaTek chipset, MediaTek, Inc. Mt6878 Firmware, MediaTek, Inc. Mt2718 Firmware, MediaTek, Inc. Mt8188 Firmware, MediaTek, Inc. Mt8189 Firmware, MediaTek, Inc. Mt6899 Firmware, MediaTek, Inc. Mt6897 Firmware, MediaTek, Inc. Mt6991 Firmware, MediaTek, Inc. Mt6989 Firmware, MediaTek, Inc. Mt8171 Firmware, MediaTek, Inc. Mt8196 Firmware, MediaTek, Inc. Mt8370 Firmware
|
NVD | |||
|
CVE-2026-20542In apusys, there is a possible memory corruption due to use after free
From the advisoryIn apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11076799; Issue ID: MSV-8143. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H AffectsMediaTek, Inc.MediaTek, Inc. MediaTek chipsetMediaTek, Inc. Mt6878 FirmwareMediaTek, Inc. Mt2718 FirmwareMediaTek, Inc. Mt8188 FirmwareMediaTek, Inc. Mt8189 FirmwareMediaTek, Inc. Mt6899 FirmwareMediaTek, Inc. Mt6897 FirmwareMediaTek, Inc. Mt6991 FirmwareMediaTek, Inc. Mt6989 FirmwareMediaTek, Inc. Mt8171 FirmwareMediaTek, Inc. Mt8196 FirmwareMediaTek, Inc. Mt8370 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 5.3 | CVE-2026-20541 |
In Modem, there is a possible out of bounds read due to a missing permission check
MediaTek, Inc.MediaTek, Inc. MediaTek chipset, MediaTek, Inc. Mt6993 Firmware, MediaTek, Inc. Mt8668 Firmware, MediaTek, Inc. Mt6986 Firmware, MediaTek, Inc. Mt6988 Firmware, MediaTek, Inc. Mt6991 Firmware, MediaTek, Inc. Mt6990 Firmware, MediaTek, Inc. Mt6989 Firmware, MediaTek, Inc. Mt6985 Firmware, MediaTek, Inc. Mt8666 Firmware, MediaTek, Inc. Mt8667 Firmware, MediaTek, Inc. Mt8673 Firmware
|
NVD | |||
|
CVE-2026-20541In Modem, there is a possible out of bounds read due to a missing permission check
From the advisoryIn Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8911. Impact if exploitedConfidentialityNone IntegrityNone AvailabilityHigh
How it is exploited
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H AffectsMediaTek, Inc.MediaTek, Inc. MediaTek chipsetMediaTek, Inc. Mt6993 FirmwareMediaTek, Inc. Mt8668 FirmwareMediaTek, Inc. Mt6986 FirmwareMediaTek, Inc. Mt6988 FirmwareMediaTek, Inc. Mt6991 FirmwareMediaTek, Inc. Mt6990 FirmwareMediaTek, Inc. Mt6989 FirmwareMediaTek, Inc. Mt6985 FirmwareMediaTek, Inc. Mt8666 FirmwareMediaTek, Inc. Mt8667 FirmwareMediaTek, Inc. Mt8673 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 5.3 | CVE-2026-20540 |
In Modem, there is a possible out of bounds read due to a missing bounds check
MediaTek, Inc.MediaTek, Inc. MediaTek chipset, MediaTek, Inc. Mt2716 Firmware, MediaTek, Inc. Mt2735 Firmware, MediaTek, Inc. Mt2737 Firmware, MediaTek, Inc. Mt6768 Firmware, MediaTek, Inc. Mt6769 Firmware, MediaTek, Inc. Mt6761 Firmware, MediaTek, Inc. Mt6765 Firmware, MediaTek, Inc. Mt6739 Firmware, MediaTek, Inc. Mt6762 Firmware, MediaTek, Inc. Mt6763 Firmware, MediaTek, Inc. Mt6767 Firmware
|
NVD | |||
|
CVE-2026-20540In Modem, there is a possible out of bounds read due to a missing bounds check
From the advisoryIn Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8912. Impact if exploitedConfidentialityNone IntegrityNone AvailabilityHigh
How it is exploited
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H AffectsMediaTek, Inc.MediaTek, Inc. MediaTek chipsetMediaTek, Inc. Mt2716 FirmwareMediaTek, Inc. Mt2735 FirmwareMediaTek, Inc. Mt2737 FirmwareMediaTek, Inc. Mt6768 FirmwareMediaTek, Inc. Mt6769 FirmwareMediaTek, Inc. Mt6761 FirmwareMediaTek, Inc. Mt6765 FirmwareMediaTek, Inc. Mt6739 FirmwareMediaTek, Inc. Mt6762 FirmwareMediaTek, Inc. Mt6763 FirmwareMediaTek, Inc. Mt6767 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 5.3 | CVE-2026-20539 |
In Modem, there is a possible out of bounds read due to a missing bounds check
MediaTek, Inc.MediaTek, Inc. MediaTek chipset, MediaTek, Inc. Mt2716 Firmware, MediaTek, Inc. Mt2735 Firmware, MediaTek, Inc. Mt2737 Firmware, MediaTek, Inc. Mt6768 Firmware, MediaTek, Inc. Mt6769 Firmware, MediaTek, Inc. Mt6761 Firmware, MediaTek, Inc. Mt6765 Firmware, MediaTek, Inc. Mt6739 Firmware, MediaTek, Inc. Mt6762 Firmware, MediaTek, Inc. Mt6763 Firmware, MediaTek, Inc. Mt6767 Firmware
|
NVD | |||
|
CVE-2026-20539In Modem, there is a possible out of bounds read due to a missing bounds check
From the advisoryIn Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8913. Impact if exploitedConfidentialityNone IntegrityNone AvailabilityHigh
How it is exploited
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H AffectsMediaTek, Inc.MediaTek, Inc. MediaTek chipsetMediaTek, Inc. Mt2716 FirmwareMediaTek, Inc. Mt2735 FirmwareMediaTek, Inc. Mt2737 FirmwareMediaTek, Inc. Mt6768 FirmwareMediaTek, Inc. Mt6769 FirmwareMediaTek, Inc. Mt6761 FirmwareMediaTek, Inc. Mt6765 FirmwareMediaTek, Inc. Mt6739 FirmwareMediaTek, Inc. Mt6762 FirmwareMediaTek, Inc. Mt6763 FirmwareMediaTek, Inc. Mt6767 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 5.3 | CVE-2026-20538 |
In Modem, there is a possible out of bounds read due to a missing permission check
MediaTek, Inc.MediaTek, Inc. MediaTek chipset, MediaTek, Inc. Mt2716 Firmware, MediaTek, Inc. Mt2735 Firmware, MediaTek, Inc. Mt2737 Firmware, MediaTek, Inc. Mt6768 Firmware, MediaTek, Inc. Mt6769 Firmware, MediaTek, Inc. Mt6761 Firmware, MediaTek, Inc. Mt6765 Firmware, MediaTek, Inc. Mt6739 Firmware, MediaTek, Inc. Mt6762 Firmware, MediaTek, Inc. Mt6763 Firmware, MediaTek, Inc. Mt6767 Firmware
|
NVD | |||
|
CVE-2026-20538In Modem, there is a possible out of bounds read due to a missing permission check
From the advisoryIn Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8914. Impact if exploitedConfidentialityNone IntegrityNone AvailabilityHigh
How it is exploited
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H AffectsMediaTek, Inc.MediaTek, Inc. MediaTek chipsetMediaTek, Inc. Mt2716 FirmwareMediaTek, Inc. Mt2735 FirmwareMediaTek, Inc. Mt2737 FirmwareMediaTek, Inc. Mt6768 FirmwareMediaTek, Inc. Mt6769 FirmwareMediaTek, Inc. Mt6761 FirmwareMediaTek, Inc. Mt6765 FirmwareMediaTek, Inc. Mt6739 FirmwareMediaTek, Inc. Mt6762 FirmwareMediaTek, Inc. Mt6763 FirmwareMediaTek, Inc. Mt6767 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.7 | CVE-2026-20537 |
In aidl, there is a possible memory corruption due to use after free
MediaTek, Inc.MediaTek, Inc. MediaTek chipset, MediaTek, Inc. Mt6878 Firmware, MediaTek, Inc. Mt8910 Firmware, MediaTek, Inc. Mt6881 Firmware, MediaTek, Inc. Mt6993 Firmware, MediaTek, Inc. Mt8188 Firmware, MediaTek, Inc. Mt8189 Firmware, MediaTek, Inc. Mt8668 Firmware, MediaTek, Inc. Mt8781 Firmware, MediaTek, Inc. Mt6899 Firmware, MediaTek, Inc. Mt6991 Firmware, MediaTek, Inc. Mt6989 Firmware
|
NVD | |||
|
CVE-2026-20537In aidl, there is a possible memory corruption due to use after free
From the advisoryIn aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11185225; Issue ID: MSV-9024. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H AffectsMediaTek, Inc.MediaTek, Inc. MediaTek chipsetMediaTek, Inc. Mt6878 FirmwareMediaTek, Inc. Mt8910 FirmwareMediaTek, Inc. Mt6881 FirmwareMediaTek, Inc. Mt6993 FirmwareMediaTek, Inc. Mt8188 FirmwareMediaTek, Inc. Mt8189 FirmwareMediaTek, Inc. Mt8668 FirmwareMediaTek, Inc. Mt8781 FirmwareMediaTek, Inc. Mt6899 FirmwareMediaTek, Inc. Mt6991 FirmwareMediaTek, Inc. Mt6989 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.7 | CVE-2026-20536 |
In aidl, there is a possible memory corruption due to use after free
MediaTek, Inc.MediaTek, Inc. MediaTek chipset, MediaTek, Inc. Mt6878 Firmware, MediaTek, Inc. Mt6881 Firmware, MediaTek, Inc. Mt6993 Firmware, MediaTek, Inc. Mt8188 Firmware, MediaTek, Inc. Mt8189 Firmware, MediaTek, Inc. Mt8668 Firmware, MediaTek, Inc. Mt6899 Firmware, MediaTek, Inc. Mt6991 Firmware, MediaTek, Inc. Mt6989 Firmware, MediaTek, Inc. Mt8695 Firmware, MediaTek, Inc. Mt8696 Firmware
|
NVD | |||
|
CVE-2026-20536In aidl, there is a possible memory corruption due to use after free
From the advisoryIn aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11242428; Issue ID: MSV-9038. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H AffectsMediaTek, Inc.MediaTek, Inc. MediaTek chipsetMediaTek, Inc. Mt6878 FirmwareMediaTek, Inc. Mt6881 FirmwareMediaTek, Inc. Mt6993 FirmwareMediaTek, Inc. Mt8188 FirmwareMediaTek, Inc. Mt8189 FirmwareMediaTek, Inc. Mt8668 FirmwareMediaTek, Inc. Mt6899 FirmwareMediaTek, Inc. Mt6991 FirmwareMediaTek, Inc. Mt6989 FirmwareMediaTek, Inc. Mt8695 FirmwareMediaTek, Inc. Mt8696 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.7 | CVE-2026-20535 |
In aidl, there is a possible escalation of privilege due to a missing permission check
MediaTek, Inc.MediaTek, Inc. MediaTek chipset, MediaTek, Inc. Mt6878 Firmware, MediaTek, Inc. Mt8910 Firmware, MediaTek, Inc. Mt6881 Firmware, MediaTek, Inc. Mt6993 Firmware, MediaTek, Inc. Mt8188 Firmware, MediaTek, Inc. Mt8189 Firmware, MediaTek, Inc. Mt8668 Firmware, MediaTek, Inc. Mt8781 Firmware, MediaTek, Inc. Mt6899 Firmware, MediaTek, Inc. Mt6991 Firmware, MediaTek, Inc. Mt6989 Firmware
|
NVD | |||
|
CVE-2026-20535In aidl, there is a possible escalation of privilege due to a missing permission check
From the advisoryIn aidl, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11185216; Issue ID: MSV-9039. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H AffectsMediaTek, Inc.MediaTek, Inc. MediaTek chipsetMediaTek, Inc. Mt6878 FirmwareMediaTek, Inc. Mt8910 FirmwareMediaTek, Inc. Mt6881 FirmwareMediaTek, Inc. Mt6993 FirmwareMediaTek, Inc. Mt8188 FirmwareMediaTek, Inc. Mt8189 FirmwareMediaTek, Inc. Mt8668 FirmwareMediaTek, Inc. Mt8781 FirmwareMediaTek, Inc. Mt6899 FirmwareMediaTek, Inc. Mt6991 FirmwareMediaTek, Inc. Mt6989 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 5.3 | CVE-2026-20534 |
In Modem, there is a possible out of bounds read due to an incorrect bounds check
MediaTek, Inc.MediaTek, Inc. MediaTek chipset, MediaTek, Inc. Mt2716 Firmware, MediaTek, Inc. Mt2735 Firmware, MediaTek, Inc. Mt2737 Firmware, MediaTek, Inc. Mt6768 Firmware, MediaTek, Inc. Mt6769 Firmware, MediaTek, Inc. Mt6761 Firmware, MediaTek, Inc. Mt6765 Firmware, MediaTek, Inc. Mt6739 Firmware, MediaTek, Inc. Mt6762 Firmware, MediaTek, Inc. Mt6763 Firmware, MediaTek, Inc. Mt6767 Firmware
|
NVD | |||
|
CVE-2026-20534In Modem, there is a possible out of bounds read due to an incorrect bounds check
From the advisoryIn Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01797547; Issue ID: MSV-9155. Impact if exploitedConfidentialityNone IntegrityNone AvailabilityHigh
How it is exploited
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H AffectsMediaTek, Inc.MediaTek, Inc. MediaTek chipsetMediaTek, Inc. Mt2716 FirmwareMediaTek, Inc. Mt2735 FirmwareMediaTek, Inc. Mt2737 FirmwareMediaTek, Inc. Mt6768 FirmwareMediaTek, Inc. Mt6769 FirmwareMediaTek, Inc. Mt6761 FirmwareMediaTek, Inc. Mt6765 FirmwareMediaTek, Inc. Mt6739 FirmwareMediaTek, Inc. Mt6762 FirmwareMediaTek, Inc. Mt6763 FirmwareMediaTek, Inc. Mt6767 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.7 | CVE-2026-20533 |
In display, there is a possible escalation of privilege due to an integer overflow
MediaTek, Inc.MediaTek, Inc. MediaTek chipset, MediaTek, Inc. Mt6833 Firmware, MediaTek, Inc. Mt6835 Firmware, MediaTek, Inc. Mt6853 Firmware, MediaTek, Inc. Mt6855 Firmware, MediaTek, Inc. Mt6858 Firmware, MediaTek, Inc. Mt6768 Firmware, MediaTek, Inc. Mt6781 Firmware, MediaTek, Inc. Mt6789 Firmware, MediaTek, Inc. Mt6761 Firmware, MediaTek, Inc. Mt6765 Firmware, MediaTek, Inc. Mt6739 Firmware
|
NVD | |||
|
CVE-2026-20533In display, there is a possible escalation of privilege due to an integer overflow
From the advisoryIn display, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11296678; Issue ID: MSV-9167. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H AffectsMediaTek, Inc.MediaTek, Inc. MediaTek chipsetMediaTek, Inc. Mt6833 FirmwareMediaTek, Inc. Mt6835 FirmwareMediaTek, Inc. Mt6853 FirmwareMediaTek, Inc. Mt6855 FirmwareMediaTek, Inc. Mt6858 FirmwareMediaTek, Inc. Mt6768 FirmwareMediaTek, Inc. Mt6781 FirmwareMediaTek, Inc. Mt6789 FirmwareMediaTek, Inc. Mt6761 FirmwareMediaTek, Inc. Mt6765 FirmwareMediaTek, Inc. Mt6739 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.2 | CVE-2026-20532 |
In apu, there is a possible application crash due to double free
MediaTek, Inc.MediaTek, Inc. MediaTek chipset, MediaTek, Inc. Mt8910 Firmware, MediaTek, Inc. Mt6993 Firmware, MediaTek, Inc. Mt8668 Firmware, MediaTek, Inc. Mt8781 Firmware, MediaTek, Inc. Mt6899 Firmware
|
NVD | |||
|
CVE-2026-20532In apu, there is a possible application crash due to double free
From the advisoryIn apu, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249024; Issue ID: MSV-9168. Impact if exploitedConfidentialityNone IntegrityNone AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H AffectsMediaTek, Inc.MediaTek, Inc. MediaTek chipsetMediaTek, Inc. Mt8910 FirmwareMediaTek, Inc. Mt6993 FirmwareMediaTek, Inc. Mt8668 FirmwareMediaTek, Inc. Mt8781 FirmwareMediaTek, Inc. Mt6899 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 8.4 | CVE-2026-20531 |
In apu, there is a possible memory corruption due to use after free
MediaTek, Inc.MediaTek, Inc. MediaTek chipset, MediaTek, Inc. Mt8910 Firmware, MediaTek, Inc. Mt6993 Firmware, MediaTek, Inc. Mt8668 Firmware, MediaTek, Inc. Mt8781 Firmware, MediaTek, Inc. Mt8793 Firmware, MediaTek, Inc. Mt6899 Firmware
|
NVD | |||
|
CVE-2026-20531In apu, there is a possible memory corruption due to use after free
From the advisoryIn apu, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249016; Issue ID: MSV-9169. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H AffectsMediaTek, Inc.MediaTek, Inc. MediaTek chipsetMediaTek, Inc. Mt8910 FirmwareMediaTek, Inc. Mt6993 FirmwareMediaTek, Inc. Mt8668 FirmwareMediaTek, Inc. Mt8781 FirmwareMediaTek, Inc. Mt8793 FirmwareMediaTek, Inc. Mt6899 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.7 | CVE-2026-20530 |
In display, there is a possible out of bounds write due to a missing bounds check
MediaTek, Inc.MediaTek, Inc. MediaTek chipset, MediaTek, Inc. Mt2718 Firmware, MediaTek, Inc. Mt6993 Firmware, MediaTek, Inc. Mt8188 Firmware, MediaTek, Inc. Mt8189 Firmware, MediaTek, Inc. Mt8668 Firmware, MediaTek, Inc. Mt8793 Firmware, MediaTek, Inc. Mt6991 Firmware, MediaTek, Inc. Mt8126 Firmware, MediaTek, Inc. Mt8171 Firmware, MediaTek, Inc. Mt8196 Firmware, MediaTek, Inc. Mt8678 Firmware
|
NVD | |||
|
CVE-2026-20530In display, there is a possible out of bounds write due to a missing bounds check
From the advisoryIn display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11292777; Issue ID: MSV-9195. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H AffectsMediaTek, Inc.MediaTek, Inc. MediaTek chipsetMediaTek, Inc. Mt2718 FirmwareMediaTek, Inc. Mt6993 FirmwareMediaTek, Inc. Mt8188 FirmwareMediaTek, Inc. Mt8189 FirmwareMediaTek, Inc. Mt8668 FirmwareMediaTek, Inc. Mt8793 FirmwareMediaTek, Inc. Mt6991 FirmwareMediaTek, Inc. Mt8126 FirmwareMediaTek, Inc. Mt8171 FirmwareMediaTek, Inc. Mt8196 FirmwareMediaTek, Inc. Mt8678 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.7 | CVE-2026-20529 |
In battery, there is a possible out of bounds write due to a missing bounds check
MediaTek, Inc.MediaTek, Inc. MediaTek chipset, MediaTek, Inc. Mt6853 Firmware, MediaTek, Inc. Mt6858 Firmware, MediaTek, Inc. Mt6768 Firmware, MediaTek, Inc. Mt6781 Firmware, MediaTek, Inc. Mt6881 Firmware, MediaTek, Inc. Mt6993 Firmware, MediaTek, Inc. Mt6991 Firmware, MediaTek, Inc. Mt6761 Firmware, MediaTek, Inc. Mt6765 Firmware, MediaTek, Inc. Mt6893 Firmware, MediaTek, Inc. Mt6989 Firmware
|
NVD | |||
|
CVE-2026-20529In battery, there is a possible out of bounds write due to a missing bounds check
From the advisoryIn battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11276677; Issue ID: MSV-9217. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H AffectsMediaTek, Inc.MediaTek, Inc. MediaTek chipsetMediaTek, Inc. Mt6853 FirmwareMediaTek, Inc. Mt6858 FirmwareMediaTek, Inc. Mt6768 FirmwareMediaTek, Inc. Mt6781 FirmwareMediaTek, Inc. Mt6881 FirmwareMediaTek, Inc. Mt6993 FirmwareMediaTek, Inc. Mt6991 FirmwareMediaTek, Inc. Mt6761 FirmwareMediaTek, Inc. Mt6765 FirmwareMediaTek, Inc. Mt6893 FirmwareMediaTek, Inc. Mt6989 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.7 | CVE-2026-20528 |
In ccci, there is a possible out of bounds write and read due to a missing bounds check
MediaTek, Inc.MediaTek, Inc. MediaTek chipset, MediaTek, Inc. Mt6880 Firmware, MediaTek, Inc. Mt2735 Firmware, MediaTek, Inc. Mt2737 Firmware, MediaTek, Inc. Mt6813 Firmware, MediaTek, Inc. Mt6986 Firmware, MediaTek, Inc. Mt6988 Firmware, MediaTek, Inc. Mt6890 Firmware, MediaTek, Inc. Mt6980D Firmware, MediaTek, Inc. Mt6986D Firmware, MediaTek, Inc. Mt6990 Firmware
|
NVD | |||
|
CVE-2026-20528In ccci, there is a possible out of bounds write and read due to a missing bounds check
From the advisoryIn ccci, there is a possible out of bounds write and read due to a missing bounds check. This could lead to local information disclosure, memory corruption, crashes, or privilege escalation if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS11428950 (Note: For MT6880, MT6890) / ALPS10563453 (Note: For MT6980D, MT6990, MT6986, MT6986D, MT6813, MT6988) / AUTO00858766 (Note: For MT2735, MT2737); Issue ID: MSV-9893. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H AffectsMediaTek, Inc.MediaTek, Inc. MediaTek chipsetMediaTek, Inc. Mt6880 FirmwareMediaTek, Inc. Mt2735 FirmwareMediaTek, Inc. Mt2737 FirmwareMediaTek, Inc. Mt6813 FirmwareMediaTek, Inc. Mt6986 FirmwareMediaTek, Inc. Mt6988 FirmwareMediaTek, Inc. Mt6890 FirmwareMediaTek, Inc. Mt6980D FirmwareMediaTek, Inc. Mt6986D FirmwareMediaTek, Inc. Mt6990 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||