Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1,161

Export CSV
CVE-2026-20401

Uncaught Exception Causes Remote Denial of Service in MediaTek Modem

In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01738310; Issue ID: MSV-5933.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Mediatek
Products
Mt2735 Mt6833 Mt6853 and 17 more
CVE-2026-20402

Modem Input Validation Failure Allowing Remote Denial of Service on MediaTek Chipsets

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00693083; Issue ID: MSV-5928.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Mediatek
Products
Mt2735 Mt6833 Mt6853 and 17 more
CVE-2026-20406

Uncaught Exception in Modem Firmware Enables Remote Denial of Service

In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01726634; Issue ID: MSV-5728.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Mediatek
Products
Mt2735 Mt2737 Mt6813 and 53 more
CVE-2026-20414

MediaTek imgSys Use‑After‑Free Allows Local Privilege Escalation

In imgsys, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10362999; Issue ID: MSV-5625.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Google Mediatek
Products
Android Mt6897 Mt6989 and 6 more
CVE-2026-20422

Remote Denial of Service via Modem Crash on Rogue Base Station

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00827332; Issue ID: MSV-5919.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Mediatek
Products
Mt2735 Mt2737 Mt6813 and 54 more
CVE-2026-20408

Remote WLAN Heap Buffer Overflow in MediaTek Chipsets

In wlan, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00461651; Issue ID: MSV-4758.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Mediatek Openwrt
Products
Mt6890 Mt7615 Mt7915 and 5 more
CVE-2026-20410

Out-of-Bounds Write in MediaTek Chipset ImgSys Enables Local Privilege Escalation

In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10362552; Issue ID: MSV-5760.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Google Mediatek
Products
Android Mt6897 Mt6989 and 3 more
CVE-2026-20413

Local Privilege Escalation via Out‑Of‑Bounds Write in MediaTek imgsys Component

In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10362725; Issue ID: MSV-5694.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Google Mediatek
Products
Android Mt6899 Mt6991 and 2 more
CVE-2026-20418

Out‑of‑Bounds Write in MediaTek Thread Leading to Remote Privilege Escalation

In Thread, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00465153; Issue ID: MSV-4927.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Google Mediatek
Products
Matter Mt7931 Mt7933
CVE-2026-20423

Out-of-Bounds Write in Mediatek WLAN STA Driver Leads to Local Privilege Escalation

In wlan STA driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00465314; Issue ID: MSV-4956.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Mediatek
Products
Mt7902 Mt7920 Mt7921 and 4 more
CVE-2026-20425

Out‑of‑Bounds Write in MediaTek Display Driver Enables Local Privilege Escalation

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5539.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Google Mediatek
Products
Android Mt6739 Mt6761 and 27 more
CVE-2026-20426

Out‑of‑Bounds Write in MediaTek Chipset Enables Local Privilege Escalation

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5538.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Google Mediatek
Products
Android Mt6739 Mt6761 and 27 more
CVE-2026-20427

Missing Bounds Check Enables Local Privilege Escalation in MediaTek Display Subsystem

In display, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5537.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Google Mediatek
Products
Android Mt6739 Mt6761 and 27 more
CVE-2026-20428

Out‑of‑Bounds Write in MediaTek Display Code Enables Local Privilege Escalation

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5536.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Google Mediatek
Products
Android Mt6739 Mt6761 and 27 more
CVE-2026-20430

Out-of-Bounds Write in MediaTek Wireless Firmware Enables Privilege Escalation

In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00467553; Issue ID: MSV-5151.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Mediatek Openwrt
Products
Mt6890 Mt7915 Mt7916 and 4 more
CVE-2026-20438

Out‑of‑Bounds Write in MediaTek MAE Enables Local Privilege Escalation

In MAE, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431920; Issue ID: MSV-5835.

CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Not listed
Vendors
Google Mediatek
Products
Android Mt2718 Mt6899 and 9 more
CVE-2026-20442

Use-After-Free Leading to Local Denial of Service on MediaTek Chipsets

In display, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10436998; Issue ID: MSV-5723.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Google Mediatek
Products
Android Mt6739 Mt6761 and 44 more
CVE-2026-20443

Memory Corruption via Use-After-Free in MediaTek Display

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10436998; Issue ID: MSV-5722.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Google Mediatek
Products
Android Mt6739 Mt6761 and 44 more
CVE-2026-20424

Out‑of‑Bounds Read Leading to Local Information Disclosure on MediaTek Chipsets

In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5540.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Google Mediatek
Products
Android Mt6991 Mt6993 and 3 more
CVE-2026-20445

Race Condition in MediaTek MDDP Leading to Local Denial of Service

In MDDP, there is a possible system crash due to a race condition. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10289875; Issue ID: MSV-5184.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Google Mediatek
Products
Android Mt6835 Mt6855 and 21 more