Mediatek
Page 3 of 11 — Mediatek CVEs from a corpus of 1038, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-20657 | Medium | 6.7 | 2025-04-07 | In vdec, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege if a malicious actor has alre… |
CVE-2025-20656 | Medium | 6.8 | 2025-04-07 | In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical acc… |
CVE-2025-20655 | Medium | 5.3 | 2025-04-07 | In keymaster, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has al… |
CVE-2025-20654 | Critical | 9.8 | 2025-04-07 | In wlan service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional executio… |
CVE-2025-20653 | Medium | 6.5 | 2025-03-03 | In da, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure, if an attacker has physical access t… |
CVE-2025-20652 | Medium | 4.6 | 2025-03-03 | In V5 DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical ac… |
CVE-2025-20651 | Medium | 4.1 | 2025-03-03 | In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical acces… |
CVE-2025-20650 | Medium | 6.8 | 2025-03-03 | In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical acc… |
CVE-2025-20649 | Medium | 6.5 | 2025-03-03 | In Bluetooth Stack SW, there is a possible information disclosure due to a missing permission check. This could lead to remote (proximal/adjacent) information… |
CVE-2025-20648 | Medium | 5.5 | 2025-03-03 | In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution priv… |
CVE-2025-20647 | Medium | 6.5 | 2025-03-03 | In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base st… |
CVE-2025-20646 | Critical | 9.8 | 2025-03-03 | In wlan AP FW, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional e… |
CVE-2025-20645 | High | 7.8 | 2025-03-03 | In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has… |
CVE-2025-20644 | Medium | 6.5 | 2025-03-03 | In Modem, there is a possible memory corruption due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue… |
CVE-2025-20643 | Low | 3.9 | 2025-02-03 | In DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical acces… |
CVE-2025-20642 | Medium | 6.6 | 2025-02-03 | In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical acc… |
CVE-2025-20641 | Medium | 6.6 | 2025-02-03 | In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical acc… |
CVE-2025-20640 | Medium | 4.3 | 2025-02-03 | In DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical acces… |
CVE-2025-20639 | Medium | 6.6 | 2025-02-03 | In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical acc… |
CVE-2025-20638 | Medium | 4.3 | 2025-02-03 | In DA, there is a possible read of uninitialized heap data due to uninitialized data. This could lead to local information disclosure, if an attacker has physi… |
CVE-2025-20637 | High | 7.5 | 2025-02-03 | In network HW, there is a possible system hang due to an uncaught exception. This could lead to remote denial of service with no additional execution privilege… |
CVE-2025-20636 | Medium | 6.7 | 2025-02-03 | In secmem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alr… |
CVE-2025-20635 | Medium | 6.6 | 2025-02-03 | In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical… |
CVE-2025-20634 | Critical | 9.8 | 2025-02-03 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution, if a UE has connected to a rogue bas… |
CVE-2025-20633 | High | 8.8 | 2025-02-03 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with… |
CVE-2025-20632 | High | 7.8 | 2025-02-03 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additiona… |
CVE-2025-20631 | High | 7.8 | 2025-02-03 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additiona… |
CVE-2024-20147 | Medium | 5.3 | 2025-02-03 | In Bluetooth FW, there is a possible reachable assertion due to improper exception handling. This could lead to remote denial of service with no additional exe… |
CVE-2024-20142 | Medium | 6.6 | 2025-02-03 | In V5 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical… |
CVE-2024-20141 | Medium | 6.6 | 2025-02-03 | In V5 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical… |
CVE-2024-20154 | High | 8.8 | 2025-01-06 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution, if a UE has connected to a rogue bas… |
CVE-2024-20153 | High | 7.5 | 2025-01-06 | In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID. This could lead to remote information disclosure with no addition… |
CVE-2024-20152 | Medium | 4.4 | 2025-01-06 | In wlan STA driver, there is a possible reachable assertion due to improper exception handling. This could lead to local denial of service if a malicious actor… |
CVE-2024-20151 | Medium | 6.7 | 2025-01-06 | In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has a… |
CVE-2024-20150 | High | 7.5 | 2025-01-06 | In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service with no additional execution privileges needed. Us… |
CVE-2024-20149 | High | 7.5 | 2025-01-06 | In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privilege… |
CVE-2024-20148 | Critical | 9.8 | 2025-01-06 | In wlan STA FW, there is a possible out of bounds write due to improper input validation. This could lead to remote (proximal/adjacent) code execution with no… |
CVE-2024-20146 | High | 8.1 | 2025-01-06 | In wlan STA driver, there is a possible out of bounds write due to improper input validation. This could lead to remote (proximal/adjacent) code execution with… |
CVE-2024-20145 | Medium | 6.6 | 2025-01-06 | In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical… |
CVE-2024-20144 | Medium | 6.6 | 2025-01-06 | In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical… |
CVE-2024-20143 | Medium | 6.6 | 2025-01-06 | In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical… |
CVE-2024-20140 | Medium | 6.7 | 2025-01-06 | In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alre… |
CVE-2024-20105 | Medium | 6.7 | 2025-01-06 | In m4u, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alread… |
CVE-2024-20139 | Medium | 6.5 | 2024-12-02 | In Bluetooth firmware, there is a possible firmware asssert due to improper handling of exceptional conditions. This could lead to local denial of service with… |
CVE-2024-20138 | High | 7.5 | 2024-12-02 | In wlan driver, there is a possible out of bound read due to improper input validation. This could lead to remote information disclosure with no additional exe… |
CVE-2024-20136 | Medium | 6.2 | 2024-12-02 | In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privi… |
CVE-2024-20135 | Medium | 6.7 | 2024-12-02 | In soundtrigger, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2024-20134 | Medium | 6.7 | 2024-12-02 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2024-20133 | Medium | 6.7 | 2024-12-02 | In Modem, there is a possible escalation of privilege due to an incorrect bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2024-20132 | Medium | 6.7 | 2024-12-02 | In Modem, there is a possible out of bonds write due to a mission bounds check. This could lead to local escalation of privilege with no additional execution p… |
CVE-2024-20131 | Medium | 6.7 | 2024-12-02 | In Modem, there is a possible escalation of privilege due to an incorrect bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2024-20130 | Medium | 6.7 | 2024-12-02 | In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2024-20129 | High | 7.5 | 2024-12-02 | In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution pr… |
CVE-2024-20128 | High | 7.5 | 2024-12-02 | In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution pr… |
CVE-2024-20127 | High | 7.5 | 2024-12-02 | In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution pr… |
CVE-2024-20125 | Medium | 6.7 | 2024-12-02 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alrea… |
CVE-2024-20116 | Medium | 4.4 | 2024-12-02 | In cmdq, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2024-20124 | Medium | 4.4 | 2024-11-04 | In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privile… |
CVE-2024-20123 | Medium | 4.4 | 2024-11-04 | In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privile… |
CVE-2024-20122 | Medium | 4.4 | 2024-11-04 | In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privile… |
CVE-2024-20121 | Medium | 6.7 | 2024-11-04 | In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2024-20120 | Medium | 6.7 | 2024-11-04 | In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2024-20119 | Medium | 6.7 | 2024-11-04 | In mms, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2024-20118 | Medium | 6.7 | 2024-11-04 | In mms, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2024-20117 | Medium | 4.4 | 2024-11-04 | In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privile… |
CVE-2024-20115 | Medium | 6.7 | 2024-11-04 | In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2024-20114 | Medium | 6.7 | 2024-11-04 | In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2024-20113 | Medium | 6.7 | 2024-11-04 | In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2024-20112 | Medium | 4.4 | 2024-11-04 | In isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges neede… |
CVE-2024-20111 | Medium | 6.7 | 2024-11-04 | In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2024-20110 | Medium | 6.7 | 2024-11-04 | In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2024-20109 | Medium | 6.7 | 2024-11-04 | In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2024-20108 | Medium | 6.7 | 2024-11-04 | In atci, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2024-20107 | Medium | 6.2 | 2024-11-04 | In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privi… |
CVE-2024-20106 | Medium | 6.7 | 2024-11-04 | In m4u, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2024-20104 | High | 8.4 | 2024-11-04 | In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution pri… |
CVE-2024-20103 | Critical | 9.8 | 2024-10-07 | In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional executi… |
CVE-2024-20102 | Medium | 4.9 | 2024-10-07 | In wlan driver, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with System execution… |
CVE-2024-20101 | Critical | 9.8 | 2024-10-07 | In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution… |
CVE-2024-20100 | Critical | 9.8 | 2024-10-07 | In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution… |
CVE-2024-20099 | Medium | 6.7 | 2024-10-07 | In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2024-20098 | Medium | 6.7 | 2024-10-07 | In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2024-20097 | Medium | 4.4 | 2024-10-07 | In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2024-20096 | Medium | 4.4 | 2024-10-07 | In m4u, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2024-20095 | Medium | 4.4 | 2024-10-07 | In m4u, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2024-20094 | High | 7.5 | 2024-10-07 | In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges n… |
CVE-2024-20093 | Medium | 4.4 | 2024-10-07 | In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2024-20092 | High | 7.8 | 2024-10-07 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2024-20091 | Medium | 4.4 | 2024-10-07 | In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2024-20090 | Medium | 6.7 | 2024-10-07 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2024-20089 | High | 7.5 | 2024-09-02 | In wlan, there is a possible denial of service due to incorrect error handling. This could lead to remote denial of service with no additional execution privil… |
CVE-2024-20088 | Medium | 4.4 | 2024-09-02 | In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution priv… |
CVE-2024-20087 | Medium | 6.7 | 2024-09-02 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2024-20086 | Medium | 6.7 | 2024-09-02 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2024-20085 | Medium | 4.4 | 2024-09-02 | In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privilege… |
CVE-2024-20084 | Medium | 4.4 | 2024-09-02 | In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privilege… |
CVE-2024-20083 | Critical | 9.8 | 2024-08-14 | In venc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2024-20082 | Critical | 9.8 | 2024-08-14 | In Modem, there is a possible memory corruption due to a missing bounds check. This could lead to remote code execution with no additional execution privileges… |
CVE-2024-20081 | Medium | 6.7 | 2024-07-01 | In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System executi… |
CVE-2024-20080 | Critical | 9.8 | 2024-07-01 | In gnss service, there is a possible escalation of privilege due to improper certificate validation. This could lead to remote escalation of privilege with no… |