Mediatek, Inc.
1,047 CVEs in 567 Mediatek, Inc. products, including Mediatek Chipset, Mt6890, Mt7615, Mt7622, Mt7663, Mt7915, Mt7916, Mt7981, Mt7986, Mt6879, Mt6895, Mt6…
Mediatek, Inc. products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-20589 | Medium | 6.7 | 2026-10-05 | In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtai… |
CVE-2026-20588 | Medium | 6.7 | 2026-10-05 | In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has a… |
CVE-2026-20587 | Medium | 6.7 | 2026-10-05 | In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already o… |
CVE-2026-20586 | High | 8.8 | 2026-10-05 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution… |
CVE-2026-20579 | Medium | 6.7 | 2026-10-05 | In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtai… |
CVE-2026-20544 | Medium | 6.8 | 2026-10-05 | In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical a… |
CVE-2026-20543 | Medium | 5.5 | 2026-10-05 | In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privile… |
CVE-2026-20542 | Medium | 6.7 | 2026-10-05 | In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtai… |
CVE-2026-20541 | Medium | 5.3 | 2026-10-05 | In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rog… |
CVE-2026-20540 | Medium | 5.3 | 2026-10-05 | In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue b… |
CVE-2026-20539 | Medium | 5.3 | 2026-10-05 | In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue b… |
CVE-2026-20538 | Medium | 5.3 | 2026-10-05 | In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rog… |
CVE-2026-20537 | Medium | 6.7 | 2026-10-05 | In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtaine… |
CVE-2026-20536 | Medium | 6.7 | 2026-10-05 | In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtaine… |
CVE-2026-20535 | Medium | 6.7 | 2026-10-05 | In aidl, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor h… |
CVE-2026-20534 | Medium | 5.3 | 2026-10-05 | In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogu… |
CVE-2026-20533 | Medium | 6.7 | 2026-10-05 | In display, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has a… |
CVE-2026-20532 | Medium | 6.2 | 2026-10-05 | In apu, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges needed. Us… |
CVE-2026-20531 | High | 8.4 | 2026-10-05 | In apu, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution privileges n… |
CVE-2026-20530 | Medium | 6.7 | 2026-10-05 | In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has al… |
CVE-2026-20529 | Medium | 6.7 | 2026-10-05 | In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has al… |
CVE-2026-20528 | Medium | 6.7 | 2026-10-05 | In ccci, there is a possible out of bounds write and read due to a missing bounds check. This could lead to local information disclosure, memory corruption, cr… |
CVE-2026-20527 | Medium | 5.3 | 2026-10-05 | In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base st… |
CVE-2026-20526 | High | 7.5 | 2026-10-05 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a… |
CVE-2026-20525 | Medium | 5.3 | 2026-10-05 | In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base… |
CVE-2026-20524 | High | 8.4 | 2026-10-05 | In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution p… |
CVE-2026-20523 | High | 8.4 | 2026-10-05 | In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execu… |
CVE-2026-20522 | High | 8.4 | 2026-10-05 | In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execu… |
CVE-2026-20521 | High | 8.4 | 2026-10-05 | In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional ex… |
CVE-2026-20520 | High | 7.5 | 2026-10-05 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a… |
CVE-2026-20519 | High | 7.5 | 2026-10-05 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a… |
CVE-2026-20518 | Medium | 4.4 | 2026-09-07 | In geniezone, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor ha… |
CVE-2026-20517 | Medium | 6.7 | 2026-09-07 | In geniezone, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has alre… |
CVE-2026-20516 | Medium | 5.5 | 2026-09-07 | In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privil… |
CVE-2026-20515 | Medium | 5.5 | 2026-09-07 | In gpu, there is a possible system crash due to use after free. This could lead to local information disclosure with User execution privileges needed. User int… |
CVE-2026-20514 | Medium | 4.4 | 2026-09-07 | In Audio HAL, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious acto… |
CVE-2026-20513 | Medium | 4.4 | 2026-09-07 | In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor… |
CVE-2026-20512 | Medium | 6.7 | 2026-09-07 | In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious act… |
CVE-2026-20511 | Medium | 6.7 | 2026-09-07 | In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has alrea… |
CVE-2026-20510 | Medium | 6.7 | 2026-09-07 | In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalation of privilege if a malicious actor has… |
CVE-2026-20509 | Medium | 6.7 | 2026-09-07 | In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has… |
CVE-2026-20508 | Medium | 6.7 | 2026-09-07 | In Power HAL, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has alre… |
CVE-2026-20507 | Medium | 6.7 | 2026-09-07 | In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has alre… |
CVE-2026-20506 | Medium | 6.7 | 2026-09-07 | In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has alre… |
CVE-2026-20504 | Medium | 5.3 | 2026-09-07 | In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base st… |
CVE-2026-20503 | Medium | 5.3 | 2026-09-07 | In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base st… |
CVE-2026-20502 | High | 8.4 | 2026-09-07 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution p… |
CVE-2026-20501 | High | 8.4 | 2026-09-07 | In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution p… |
CVE-2026-20500 | Medium | 5.5 | 2026-09-07 | In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed… |
CVE-2026-20498 | Medium | 6.0 | 2026-08-03 | In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious ac… |
CVE-2026-20497 | Medium | 6.0 | 2026-08-03 | In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has… |
CVE-2026-20496 | Medium | 4.4 | 2026-08-03 | In geniezone, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has al… |
CVE-2026-20495 | High | 7.8 | 2026-08-03 | In Bluetooth driver, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with User execut… |
CVE-2026-20494 | Medium | 5.5 | 2026-08-03 | In wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already… |
CVE-2026-20493 | Medium | 4.4 | 2026-08-03 | In wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obt… |
CVE-2026-20492 | Medium | 5.5 | 2026-08-03 | In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This could lead to local denial of service with User execution privileg… |
CVE-2026-20491 | Medium | 5.5 | 2026-08-03 | In med, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of service with User execution privileges nee… |
CVE-2026-20490 | Medium | 4.4 | 2026-08-03 | In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obta… |
CVE-2026-20489 | Medium | 4.4 | 2026-08-03 | In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a malicious actor has alr… |
CVE-2026-20488 | Medium | 4.4 | 2026-08-03 | In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has… |
CVE-2026-20486 | Medium | 6.7 | 2026-08-03 | In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious actor has… |
CVE-2026-20485 | Medium | 6.0 | 2026-08-03 | In HFRP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alrea… |
CVE-2026-20484 | Medium | 4.4 | 2026-08-03 | In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has… |
CVE-2026-20483 | High | 7.7 | 2026-08-03 | In Telephony, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additiona… |
CVE-2026-20482 | Medium | 6.5 | 2026-08-03 | In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote (proximal/adjacent) denial of service with no additi… |
CVE-2026-20481 | Medium | 6.0 | 2026-08-03 | In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has… |
CVE-2026-20480 | Medium | 5.5 | 2026-08-03 | In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges… |
CVE-2026-20479 | High | 7.5 | 2026-08-03 | In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue b… |
CVE-2026-20478 | Medium | 5.5 | 2026-08-03 | In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges… |
CVE-2026-20477 | Medium | 6.0 | 2026-08-03 | In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has al… |
CVE-2026-20476 | Medium | 5.5 | 2026-08-03 | In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with User execution privileges needed… |
CVE-2026-20475 | Medium | 6.0 | 2026-08-03 | In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has al… |
CVE-2026-20474 | Medium | 6.0 | 2026-08-03 | In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has alre… |
CVE-2026-20473 | Medium | 6.0 | 2026-08-03 | In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obta… |
CVE-2026-20472 | Medium | 4.4 | 2026-08-03 | In TFA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obta… |
CVE-2026-20471 | Medium | 4.6 | 2026-08-03 | In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service, if an attacker has physical access to… |
CVE-2026-20470 | Medium | 6.2 | 2026-08-03 | In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional… |
CVE-2026-20469 | Medium | 6.0 | 2026-08-03 | In trusted_mem, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious a… |
CVE-2026-20468 | Medium | 6.0 | 2026-08-03 | In apusys, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege if a malicious actor has alre… |
CVE-2026-20467 | Medium | 6.0 | 2026-08-03 | In apusys, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has… |
CVE-2026-20466 | Medium | 6.1 | 2026-08-03 | In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalation of privilege, if an attacker has ph… |
CVE-2026-20465 | High | 8.1 | 2026-08-03 | In wlan AP driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) escalation of privilege… |
CVE-2026-20464 | Medium | 6.5 | 2026-08-03 | In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege if a malicious actor has… |
CVE-2026-20463 | Medium | 6.7 | 2026-07-01 | In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege if a malicious actor has al… |
CVE-2026-20462 | Medium | 6.7 | 2026-07-01 | In Telephony, there is a possible memory corruption due to a heap buffer overflow. This could lead to local escalation of privilege if a malicious actor has al… |
CVE-2026-20461 | Medium | 5.3 | 2026-07-01 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue… |
CVE-2026-20460 | Medium | 5.3 | 2026-07-01 | In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure, if a UE has connected… |
CVE-2026-20459 | Medium | 5.3 | 2026-07-01 | In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base… |
CVE-2026-20458 | High | 7.5 | 2026-07-01 | In Modem, there is a possible memory corruption due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a ro… |
CVE-2026-20457 | Medium | 5.3 | 2026-07-01 | In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base… |
CVE-2026-20456 | Medium | 5.5 | 2026-06-01 | In wlan STA driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with User execution privileges n… |
CVE-2026-20455 | High | 7.8 | 2026-06-01 | In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has… |
CVE-2026-20454 | Medium | 6.4 | 2026-06-01 | In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has alread… |
CVE-2026-20453 | Medium | 6.7 | 2026-06-01 | In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has… |
CVE-2026-20452 | High | 8.0 | 2026-06-01 | In wlan AP driver, there is a possible memory corruption due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with User… |
CVE-2026-20451 | Medium | 6.7 | 2026-05-04 | In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtai… |
CVE-2026-20450 | Medium | 6.5 | 2026-05-04 | In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base… |
CVE-2026-20449 | Medium | 6.5 | 2026-05-04 | In Modem, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base st… |
CVE-2026-20448 | Medium | 6.7 | 2026-05-04 | In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious ac… |
CVE-2026-20447 | Medium | 6.7 | 2026-05-04 | In geniezone, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor… |