Veille CVE

Octobre 2026

9 CVE

Critique 0 Élevée 2 Moyenne 7 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Mediatek mt6813 firmware » ✕
  1. CVE-2026-20543 5.5 Moyenne

    MediaTek, Inc. MediaTek chipset · Mediatek mt2716 firmware · Mediatek mt2735 firmware · Mediatek mt2737 firmware

    In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01645293; Issue ID: MSV-6761.

  2. CVE-2026-20540 5.3 Moyenne

    MediaTek, Inc. MediaTek chipset · Mediatek mt2716 firmware · Mediatek mt2735 firmware · Mediatek mt2737 firmware

    In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8912.

  3. CVE-2026-20539 5.3 Moyenne

    MediaTek, Inc. MediaTek chipset · Mediatek mt2716 firmware · Mediatek mt2735 firmware · Mediatek mt2737 firmware

    In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8913.

  4. CVE-2026-20538 5.3 Moyenne

    MediaTek, Inc. MediaTek chipset · Mediatek mt2716 firmware · Mediatek mt2735 firmware · Mediatek mt2737 firmware

    In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8914.

  5. CVE-2026-20534 5.3 Moyenne

    MediaTek, Inc. MediaTek chipset · Mediatek mt2716 firmware · Mediatek mt2735 firmware · Mediatek mt2737 firmware

    In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01797547; Issue ID: MSV-9155.

  6. CVE-2026-20528 6.7 Moyenne

    MediaTek, Inc. MediaTek chipset · Mediatek mt2735 firmware · Mediatek mt2737 firmware · Mediatek mt6813 firmware

    In ccci, there is a possible out of bounds write and read due to a missing bounds check. This could lead to local information disclosure, memory corruption, crashes, or privilege escalation if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS11428950 (Note: For MT6880, MT6890) / ALPS10563453 (Note: For MT6980D, MT6990, MT6986, MT6986D, MT6813, MT6988) / AUTO00858766 (Note: For MT2735, MT2737); Issue ID: MSV-9893.

  7. CVE-2026-20527 5.3 Moyenne

    MediaTek, Inc. MediaTek chipset · Mediatek mt2716 firmware · Mediatek mt2735 firmware · Mediatek mt2737 firmware

    In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01864925 / MOLY01210562; Issue ID: MSV-8303.

  8. CVE-2026-20526 7.5 Élevée

    MediaTek, Inc. MediaTek chipset · Mediatek mt2716 firmware · Mediatek mt2735 firmware · Mediatek mt2737 firmware

    In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01898195; Issue ID: MSV-8906.

  9. CVE-2026-20520 7.5 Élevée

    MediaTek, Inc. MediaTek chipset · Mediatek mt2716 firmware · Mediatek mt2735 firmware · Mediatek mt2737 firmware

    In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01778988; Issue ID: MSV-8897.