Mediatek Mt6991
122 CVEs affecting Mediatek Mt6991. Latest disclosed: 2026-06-01. Critical: 2, High: 37.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-20634 | Critical | 9.8 | 2025-02-03 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution, if a UE has connected to a rogue bas… |
CVE-2024-20067 | Critical | 9.8 | 2024-06-03 | In modem, there is a possible out of bounds write due to improper input invalidation. This could lead to remote denial of service with no additional execution… |
CVE-2026-20433 | High | 8.8 | 2026-04-07 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a… |
CVE-2025-20708 | High | 8.8 | 2025-09-01 | In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to… |
CVE-2025-20727 | High | 8.1 | 2025-11-04 | In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege, if a UE has connected to a… |
CVE-2026-20432 | High | 8.0 | 2026-04-07 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a… |
CVE-2025-20704 | High | 8.0 | 2025-09-01 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a… |
CVE-2026-20455 | High | 7.8 | 2026-06-01 | In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has… |
CVE-2026-20412 | High | 7.8 | 2026-02-02 | In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has… |
CVE-2026-20411 | High | 7.8 | 2026-02-02 | In cameraisp, there is a possible escalation of privilege due to use after free. This could lead to local denial of service if a malicious actor has already ob… |
CVE-2025-20800 | High | 7.8 | 2026-01-06 | In mminfra, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has al… |
CVE-2025-20799 | High | 7.8 | 2026-01-06 | In c2ps, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtaine… |
CVE-2025-20798 | High | 7.8 | 2026-01-06 | In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has al… |
CVE-2025-20797 | High | 7.8 | 2026-01-06 | In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has al… |
CVE-2025-20795 | High | 7.8 | 2026-01-06 | In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has… |
CVE-2025-20781 | High | 7.8 | 2026-01-06 | In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obta… |
CVE-2025-20780 | High | 7.8 | 2026-01-06 | In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obta… |
CVE-2025-20778 | High | 7.8 | 2026-01-06 | In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has al… |
CVE-2025-20768 | High | 7.8 | 2025-12-02 | In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alr… |
CVE-2025-20767 | High | 7.8 | 2025-12-02 | In display, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has alrea… |