Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| Medium | 5.3 | CVE-2026-20527 |
In Modem, there is a possible system crash due to a missing bounds check
MediaTek, Inc.MediaTek, Inc. MediaTek chipset, MediaTek, Inc. Mt6833 Firmware, MediaTek, Inc. Mt6835 Firmware, MediaTek, Inc. Mt6853 Firmware, MediaTek, Inc. Mt6855 Firmware, MediaTek, Inc. Mt6858 Firmware, MediaTek, Inc. Mt6873 Firmware, MediaTek, Inc. Mt2716 Firmware, MediaTek, Inc. Mt2735 Firmware, MediaTek, Inc. Mt2737 Firmware, MediaTek, Inc. Mt6813 Firmware, MediaTek, Inc. Mt6815 Firmware
|
NVD | |||
|
CVE-2026-20527In Modem, there is a possible system crash due to a missing bounds check
From the advisoryIn Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01864925 / MOLY01210562; Issue ID: MSV-8303. Impact if exploitedConfidentialityNone IntegrityNone AvailabilityHigh
How it is exploited
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H AffectsMediaTek, Inc.MediaTek, Inc. MediaTek chipsetMediaTek, Inc. Mt6833 FirmwareMediaTek, Inc. Mt6835 FirmwareMediaTek, Inc. Mt6853 FirmwareMediaTek, Inc. Mt6855 FirmwareMediaTek, Inc. Mt6858 FirmwareMediaTek, Inc. Mt6873 FirmwareMediaTek, Inc. Mt2716 FirmwareMediaTek, Inc. Mt2735 FirmwareMediaTek, Inc. Mt2737 FirmwareMediaTek, Inc. Mt6813 FirmwareMediaTek, Inc. Mt6815 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.5 | CVE-2026-20526 |
In Modem, there is a possible out of bounds write due to a missing bounds check
MediaTek, Inc.MediaTek, Inc. MediaTek chipset, MediaTek, Inc. Mt6833 Firmware, MediaTek, Inc. Mt6835 Firmware, MediaTek, Inc. Mt6853 Firmware, MediaTek, Inc. Mt6855 Firmware, MediaTek, Inc. Mt6858 Firmware, MediaTek, Inc. Mt6873 Firmware, MediaTek, Inc. Mt2716 Firmware, MediaTek, Inc. Mt2735 Firmware, MediaTek, Inc. Mt2737 Firmware, MediaTek, Inc. Mt6813 Firmware, MediaTek, Inc. Mt6815 Firmware
|
NVD | |||
|
CVE-2026-20526In Modem, there is a possible out of bounds write due to a missing bounds check
From the advisoryIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01898195; Issue ID: MSV-8906. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H AffectsMediaTek, Inc.MediaTek, Inc. MediaTek chipsetMediaTek, Inc. Mt6833 FirmwareMediaTek, Inc. Mt6835 FirmwareMediaTek, Inc. Mt6853 FirmwareMediaTek, Inc. Mt6855 FirmwareMediaTek, Inc. Mt6858 FirmwareMediaTek, Inc. Mt6873 FirmwareMediaTek, Inc. Mt2716 FirmwareMediaTek, Inc. Mt2735 FirmwareMediaTek, Inc. Mt2737 FirmwareMediaTek, Inc. Mt6813 FirmwareMediaTek, Inc. Mt6815 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.5 | CVE-2026-20520 |
In Modem, there is a possible out of bounds write due to a missing bounds check
MediaTek, Inc.MediaTek, Inc. MediaTek chipset, MediaTek, Inc. Mt6833 Firmware, MediaTek, Inc. Mt6835 Firmware, MediaTek, Inc. Mt6853 Firmware, MediaTek, Inc. Mt6855 Firmware, MediaTek, Inc. Mt6858 Firmware, MediaTek, Inc. Mt6873 Firmware, MediaTek, Inc. Mt2716 Firmware, MediaTek, Inc. Mt2735 Firmware, MediaTek, Inc. Mt2737 Firmware, MediaTek, Inc. Mt6813 Firmware, MediaTek, Inc. Mt6815 Firmware
|
NVD | |||
|
CVE-2026-20520In Modem, there is a possible out of bounds write due to a missing bounds check
From the advisoryIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01778988; Issue ID: MSV-8897. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H AffectsMediaTek, Inc.MediaTek, Inc. MediaTek chipsetMediaTek, Inc. Mt6833 FirmwareMediaTek, Inc. Mt6835 FirmwareMediaTek, Inc. Mt6853 FirmwareMediaTek, Inc. Mt6855 FirmwareMediaTek, Inc. Mt6858 FirmwareMediaTek, Inc. Mt6873 FirmwareMediaTek, Inc. Mt2716 FirmwareMediaTek, Inc. Mt2735 FirmwareMediaTek, Inc. Mt2737 FirmwareMediaTek, Inc. Mt6813 FirmwareMediaTek, Inc. Mt6815 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||