Lundi 5 octobre 2026
8 CVE
-
CVE-2026-20542 6.7 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt2718 firmware · Mediatek mt6878 firmware · Mediatek mt6897 firmware
In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11076799; Issue ID: MSV-8143.
-
CVE-2026-20541 5.3 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt6985 firmware · Mediatek mt6986 firmware · Mediatek mt6988 firmware
In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8911.
-
CVE-2026-20537 6.7 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt6878 firmware · Mediatek mt6881 firmware · Mediatek mt6899 firmware
In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11185225; Issue ID: MSV-9024.
-
CVE-2026-20536 6.7 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt6878 firmware · Mediatek mt6881 firmware · Mediatek mt6899 firmware
In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11242428; Issue ID: MSV-9038.
-
CVE-2026-20535 6.7 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt8910 firmware · Mediatek mt6878 firmware · Mediatek mt6881 firmware
In aidl, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11185216; Issue ID: MSV-9039.
-
CVE-2026-20530 6.7 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt2718 firmware · Mediatek mt6991 firmware · Mediatek mt6993 firmware
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11292777; Issue ID: MSV-9195.
-
CVE-2026-20529 6.7 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt6761 firmware · Mediatek mt6765 firmware · Mediatek mt6768 firmware
In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11276677; Issue ID: MSV-9217.
-
CVE-2026-20525 5.3 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt2716 firmware · Mediatek mt6835 firmware · Mediatek mt6858 firmware
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01870473 / MOLY00814393; Issue ID: MSV-9041.