Mediatek, Inc.
998 CVEs across 567 Mediatek, Inc. products. Browse Mediatek, Inc. vulnerabilities, severities, and proof-of-concept exploits.
Mediatek, Inc. products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-20498 | Medium | 6.0 | 2026-08-03 | In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious ac… |
CVE-2026-20497 | Medium | 6.0 | 2026-08-03 | In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has… |
CVE-2026-20496 | Medium | 4.4 | 2026-08-03 | In geniezone, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has al… |
CVE-2026-20495 | High | 7.8 | 2026-08-03 | In Bluetooth driver, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with User execut… |
CVE-2026-20494 | Medium | 5.5 | 2026-08-03 | In wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already… |
CVE-2026-20493 | Medium | 4.4 | 2026-08-03 | In wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obt… |
CVE-2026-20492 | Medium | 5.5 | 2026-08-03 | In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This could lead to local denial of service with User execution privileg… |
CVE-2026-20491 | Medium | 5.5 | 2026-08-03 | In med, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of service with User execution privileges nee… |
CVE-2026-20490 | Medium | 4.4 | 2026-08-03 | In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obta… |
CVE-2026-20489 | Medium | 4.4 | 2026-08-03 | In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a malicious actor has alr… |
CVE-2026-20488 | Medium | 4.4 | 2026-08-03 | In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has… |
CVE-2026-20486 | Medium | 6.7 | 2026-08-03 | In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious actor has… |
CVE-2026-20485 | Medium | 6.0 | 2026-08-03 | In HFRP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alrea… |
CVE-2026-20484 | Medium | 4.4 | 2026-08-03 | In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has… |
CVE-2026-20483 | High | 7.7 | 2026-08-03 | In Telephony, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additiona… |
CVE-2026-20482 | Medium | 6.5 | 2026-08-03 | In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote (proximal/adjacent) denial of service with no additi… |
CVE-2026-20481 | Medium | 6.0 | 2026-08-03 | In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has… |
CVE-2026-20480 | Medium | 5.5 | 2026-08-03 | In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges… |
CVE-2026-20479 | High | 7.5 | 2026-08-03 | In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue b… |
CVE-2026-20478 | Medium | 5.5 | 2026-08-03 | In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges… |
CVE-2026-20477 | Medium | 6.0 | 2026-08-03 | In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has al… |
CVE-2026-20476 | Medium | 5.5 | 2026-08-03 | In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with User execution privileges needed… |
CVE-2026-20475 | Medium | 6.0 | 2026-08-03 | In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has al… |
CVE-2026-20474 | Medium | 6.0 | 2026-08-03 | In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has alre… |
CVE-2026-20473 | Medium | 6.0 | 2026-08-03 | In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obta… |
CVE-2026-20472 | Medium | 4.4 | 2026-08-03 | In TFA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obta… |
CVE-2026-20471 | Medium | 4.6 | 2026-08-03 | In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service, if an attacker has physical access to… |
CVE-2026-20470 | Medium | 6.2 | 2026-08-03 | In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional… |
CVE-2026-20469 | Medium | 6.0 | 2026-08-03 | In trusted_mem, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious a… |
CVE-2026-20468 | Medium | 6.0 | 2026-08-03 | In apusys, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege if a malicious actor has alre… |
CVE-2026-20467 | Medium | 6.0 | 2026-08-03 | In apusys, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has… |
CVE-2026-20466 | Medium | 6.1 | 2026-08-03 | In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalation of privilege, if an attacker has ph… |
CVE-2026-20465 | High | 8.1 | 2026-08-03 | In wlan AP driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) escalation of privilege… |
CVE-2026-20464 | Medium | 6.5 | 2026-08-03 | In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege if a malicious actor has… |
CVE-2026-20463 | Medium | 6.7 | 2026-07-01 | In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege if a malicious actor has al… |
CVE-2026-20462 | Medium | 6.7 | 2026-07-01 | In Telephony, there is a possible memory corruption due to a heap buffer overflow. This could lead to local escalation of privilege if a malicious actor has al… |
CVE-2026-20461 | Medium | 5.3 | 2026-07-01 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue… |
CVE-2026-20460 | Medium | 5.3 | 2026-07-01 | In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure, if a UE has connected… |
CVE-2026-20459 | Medium | 5.3 | 2026-07-01 | In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base… |
CVE-2026-20458 | High | 7.5 | 2026-07-01 | In Modem, there is a possible memory corruption due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a ro… |
CVE-2026-20457 | Medium | 5.3 | 2026-07-01 | In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base… |
CVE-2026-20456 | Medium | 5.5 | 2026-06-01 | In wlan STA driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with User execution privileges n… |
CVE-2026-20455 | High | 7.8 | 2026-06-01 | In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has… |
CVE-2026-20454 | Medium | 6.4 | 2026-06-01 | In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has alread… |
CVE-2026-20453 | Medium | 6.7 | 2026-06-01 | In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has… |
CVE-2026-20452 | High | 8.0 | 2026-06-01 | In wlan AP driver, there is a possible memory corruption due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with User… |
CVE-2026-20451 | Medium | 6.7 | 2026-05-04 | In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtai… |
CVE-2026-20450 | Medium | 6.5 | 2026-05-04 | In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base… |
CVE-2026-20449 | Medium | 6.5 | 2026-05-04 | In Modem, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base st… |
CVE-2026-20448 | Medium | 6.7 | 2026-05-04 | In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious ac… |
CVE-2026-20447 | Medium | 6.7 | 2026-05-04 | In geniezone, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor… |
CVE-2026-20446 | Medium | 4.3 | 2026-04-07 | In sec boot, there is a possible out of bounds write due to an integer overflow. This could lead to local denial of service, if an attacker has physical access… |
CVE-2026-20433 | High | 8.8 | 2026-04-07 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a… |
CVE-2026-20432 | High | 8.0 | 2026-04-07 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a… |
CVE-2026-20431 | Medium | 6.5 | 2026-04-07 | In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station con… |
CVE-2026-20445 | Medium | 4.4 | 2026-03-02 | In MDDP, there is a possible system crash due to a race condition. This could lead to local denial of service if a malicious actor has already obtained the Sys… |
CVE-2026-20444 | Medium | 6.7 | 2026-03-02 | In display, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alre… |
CVE-2026-20443 | Medium | 6.7 | 2026-03-02 | In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obta… |
CVE-2026-20442 | Medium | 4.4 | 2026-03-02 | In display, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the Sy… |
CVE-2026-20441 | Medium | 6.7 | 2026-03-02 | In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alread… |
CVE-2026-20440 | Medium | 6.7 | 2026-03-02 | In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alread… |
CVE-2026-20439 | Medium | 4.4 | 2026-03-02 | In imgsys, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the Sys… |
CVE-2026-20438 | Medium | 6.4 | 2026-03-02 | In MAE, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obta… |
CVE-2026-20437 | Medium | 4.4 | 2026-03-02 | In MAE, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System… |
CVE-2026-20436 | Medium | 6.7 | 2026-03-02 | In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious… |
CVE-2026-20435 | Medium | 4.6 | 2026-03-02 | In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has p… |
CVE-2026-20434 | High | 7.5 | 2026-03-02 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a… |
CVE-2026-20430 | High | 8.8 | 2026-03-02 | In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege… |
CVE-2026-20429 | Medium | 4.4 | 2026-03-02 | In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has alre… |
CVE-2026-20428 | Medium | 6.7 | 2026-03-02 | In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has al… |
CVE-2026-20427 | Medium | 6.7 | 2026-03-02 | In display, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor ha… |
CVE-2026-20426 | Medium | 6.7 | 2026-03-02 | In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has al… |
CVE-2026-20425 | Medium | 6.7 | 2026-03-02 | In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has al… |
CVE-2026-20424 | Medium | 4.4 | 2026-03-02 | In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has alre… |
CVE-2026-20423 | High | 7.8 | 2026-03-02 | In wlan STA driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with User execution… |
CVE-2026-20416 | High | 7.2 | 2026-03-02 | In pcie, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alrea… |
CVE-2026-20422 | Medium | 6.5 | 2026-02-02 | In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base… |
CVE-2026-20421 | Medium | 6.5 | 2026-02-02 | In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base… |
CVE-2026-20420 | Medium | 6.5 | 2026-02-02 | In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base… |
CVE-2026-20419 | Medium | 6.5 | 2026-02-02 | In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught exception. This could lead to remote (proximal/adjacent) denial of… |
CVE-2026-20418 | Critical | 9.8 | 2026-02-02 | In Thread, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional executio… |
CVE-2026-20417 | Medium | 5.3 | 2026-02-02 | In pcie, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alrea… |
CVE-2026-20415 | Medium | 5.5 | 2026-02-02 | In imgsys, there is a possible memory corruption due to improper locking. This could lead to local denial of service if a malicious actor has already obtained… |
CVE-2026-20414 | Medium | 6.7 | 2026-02-02 | In imgsys, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already… |
CVE-2026-20413 | Medium | 6.7 | 2026-02-02 | In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alr… |
CVE-2026-20412 | High | 7.8 | 2026-02-02 | In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has… |
CVE-2026-20411 | High | 7.8 | 2026-02-02 | In cameraisp, there is a possible escalation of privilege due to use after free. This could lead to local denial of service if a malicious actor has already ob… |
CVE-2026-20410 | Medium | 6.7 | 2026-02-02 | In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alr… |
CVE-2026-20409 | High | 7.8 | 2026-02-02 | In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alr… |
CVE-2026-20408 | High | 8.8 | 2026-02-02 | In wlan, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) escalation of privilege with no a… |
CVE-2026-20407 | Critical | 9.3 | 2026-02-02 | In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with User execu… |
CVE-2026-20406 | Medium | 6.5 | 2026-02-02 | In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base sta… |
CVE-2026-20405 | Medium | 6.5 | 2026-02-02 | In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base st… |
CVE-2026-20404 | Medium | 6.5 | 2026-02-02 | In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base… |
CVE-2026-20403 | Medium | 6.5 | 2026-02-02 | In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base st… |
CVE-2026-20402 | Medium | 6.5 | 2026-02-02 | In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base… |
CVE-2026-20401 | High | 7.5 | 2026-02-02 | In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base sta… |
CVE-2025-20807 | Medium | 6.7 | 2026-01-06 | In dpe, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already o… |
CVE-2025-20806 | Medium | 6.7 | 2026-01-06 | In dpe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained… |
CVE-2025-20805 | Medium | 6.7 | 2026-01-06 | In dpe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained… |