CVE Program partner

MediaTek

MediaTek, Inc.

API
CVEs, 365 days2291,122 all time, 72 rejected
Quality66%median 99%
CVSS by the CNA0%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA100%lower is better
OrganisationMediaTek, Inc.
RoleCNA
TypeVendor
Reports tomitre
ScopeMediaTek product issues only.
Advisorieshttps://corp.mediatek.com/product-security-bulletin

Latest CVEs · RSS

  • CVE-2026-20543 2026-10-05
    In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileg
  • CVE-2026-20542 2026-10-05
    In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtain
  • CVE-2026-20541 2026-10-05
    In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogu
  • CVE-2026-20540 2026-10-05
    In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue ba
  • CVE-2026-20539 2026-10-05
    In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue ba
  • CVE-2026-20538 2026-10-05
    In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogu
  • CVE-2026-20537 2026-10-05
    In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained
  • CVE-2026-20536 2026-10-05
    In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained
  • CVE-2026-20535 2026-10-05
    In aidl, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor ha
  • CVE-2026-20534 2026-10-05
    In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue
  • CVE-2026-20533 2026-10-05
    In display, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has al
  • CVE-2026-20532 2026-10-05
    In apu, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges needed. Use
  • CVE-2026-20531 2026-10-05
    In apu, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution privileges ne
  • CVE-2026-20530 2026-10-05
    In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alr
  • CVE-2026-20529 2026-10-05
    In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alr
  • CVE-2026-20528 2026-10-05
    In ccci, there is a possible out of bounds write and read due to a missing bounds check. This could lead to local information disclosure, memory corruption, cra
  • CVE-2026-20544 2026-10-05
    In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical ac
  • CVE-2026-20588 2026-10-05
    In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has al
  • CVE-2026-20587 2026-10-05
    In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already ob
  • CVE-2026-20579 2026-10-05
    In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtain
  • CVE-2026-20527 2026-10-05
    In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base sta
  • CVE-2026-20526 2026-10-05
    In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a r
  • CVE-2026-20525 2026-10-05
    In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base
  • CVE-2026-20524 2026-10-05
    In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution pr
  • CVE-2026-20523 2026-10-05
    In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execut

All CVE Program partners