Mediatek, Inc. Mediatek Chipset
174 CVEs affecting Mediatek, Inc. Mediatek Chipset. Latest disclosed: 2026-10-05. Critical: 2, High: 40.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-20418 | Critical | 9.8 | 2026-02-02 | In Thread, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional executio… |
CVE-2026-20407 | Critical | 9.3 | 2026-02-02 | In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with User execu… |
CVE-2026-20586 | High | 8.8 | 2026-10-05 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution… |
CVE-2026-20433 | High | 8.8 | 2026-04-07 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a… |
CVE-2026-20430 | High | 8.8 | 2026-03-02 | In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege… |
CVE-2026-20408 | High | 8.8 | 2026-02-02 | In wlan, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) escalation of privilege with no a… |
CVE-2026-20531 | High | 8.4 | 2026-10-05 | In apu, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution privileges n… |
CVE-2026-20524 | High | 8.4 | 2026-10-05 | In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution p… |
CVE-2026-20523 | High | 8.4 | 2026-10-05 | In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execu… |
CVE-2026-20522 | High | 8.4 | 2026-10-05 | In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execu… |
CVE-2026-20521 | High | 8.4 | 2026-10-05 | In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional ex… |
CVE-2026-20502 | High | 8.4 | 2026-09-07 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution p… |
CVE-2026-20501 | High | 8.4 | 2026-09-07 | In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution p… |
CVE-2026-20465 | High | 8.1 | 2026-08-03 | In wlan AP driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) escalation of privilege… |
CVE-2026-20452 | High | 8.0 | 2026-06-01 | In wlan AP driver, there is a possible memory corruption due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with User… |
CVE-2026-20432 | High | 8.0 | 2026-04-07 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a… |
CVE-2026-20495 | High | 7.8 | 2026-08-03 | In Bluetooth driver, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with User execut… |
CVE-2026-20455 | High | 7.8 | 2026-06-01 | In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has… |
CVE-2026-20423 | High | 7.8 | 2026-03-02 | In wlan STA driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with User execution… |
CVE-2026-20412 | High | 7.8 | 2026-02-02 | In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has… |