Veille CVE

Recherche « Mediatek mt6991 firmware »

17 CVE

  1. CVE-2026-20542 6.7 Moyenne

    MediaTek, Inc. MediaTek chipset · Mediatek mt2718 firmware · Mediatek mt6878 firmware · Mediatek mt6897 firmware

    In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11076799; Issue ID: MSV-8143.

  2. CVE-2026-20541 5.3 Moyenne

    MediaTek, Inc. MediaTek chipset · Mediatek mt6985 firmware · Mediatek mt6986 firmware · Mediatek mt6988 firmware

    In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8911.

  3. CVE-2026-20537 6.7 Moyenne

    MediaTek, Inc. MediaTek chipset · Mediatek mt6878 firmware · Mediatek mt6881 firmware · Mediatek mt6899 firmware

    In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11185225; Issue ID: MSV-9024.

  4. CVE-2026-20536 6.7 Moyenne

    MediaTek, Inc. MediaTek chipset · Mediatek mt6878 firmware · Mediatek mt6881 firmware · Mediatek mt6899 firmware

    In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11242428; Issue ID: MSV-9038.

  5. CVE-2026-20535 6.7 Moyenne

    MediaTek, Inc. MediaTek chipset · Mediatek mt8910 firmware · Mediatek mt6878 firmware · Mediatek mt6881 firmware

    In aidl, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11185216; Issue ID: MSV-9039.

  6. CVE-2026-20530 6.7 Moyenne

    MediaTek, Inc. MediaTek chipset · Mediatek mt2718 firmware · Mediatek mt6991 firmware · Mediatek mt6993 firmware

    In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11292777; Issue ID: MSV-9195.

  7. CVE-2026-20529 6.7 Moyenne

    MediaTek, Inc. MediaTek chipset · Mediatek mt6761 firmware · Mediatek mt6765 firmware · Mediatek mt6768 firmware

    In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11276677; Issue ID: MSV-9217.

  8. CVE-2026-20525 5.3 Moyenne

    MediaTek, Inc. MediaTek chipset · Mediatek mt2716 firmware · Mediatek mt6835 firmware · Mediatek mt6858 firmware

    In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01870473 / MOLY00814393; Issue ID: MSV-9041.

  9. CVE-2026-20500 5.5 Moyenne

    MediaTek, Inc. MediaTek chipset · Mediatek mt2716 firmware · Mediatek mt6835 firmware · Mediatek mt6858 firmware

    In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01810811; Issue ID: MSV-9232.

  10. CVE-2026-20498 6.0 Moyenne

    MediaTek, Inc. MediaTek chipset · Mediatek mt6991 firmware · Mediatek mt8768 firmware · Mediatek mt8791t firmware

    In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10900493; Issue ID: MSV-6765.

  11. CVE-2026-20489 4.4 Moyenne

    MediaTek, Inc. MediaTek chipset · Mediatek mt6991 firmware · Mediatek mt6993 firmware · Mediatek mt8126 firmware

    In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004274; Issue ID: MSV-7749.

  12. CVE-2026-20488 4.4 Moyenne

    MediaTek, Inc. MediaTek chipset · Mediatek mt6991 firmware · Mediatek mt6993 firmware · Mediatek mt8126 firmware

    In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7757.

  13. CVE-2026-20486 6.7 Moyenne

    MediaTek, Inc. MediaTek chipset · Mediatek mt8910 firmware · Mediatek mt2718 firmware · Mediatek mt6878 firmware

    In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11012302; Issue ID: MSV-7833.

  14. CVE-2026-20477 6.0 Moyenne

    MediaTek, Inc. MediaTek chipset · Mediatek mt8910 firmware · Mediatek mt6991 firmware · Mediatek mt6993 firmware

    In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11009963; Issue ID: MSV-7658.

  15. CVE-2026-20475 6.0 Moyenne

    MediaTek, Inc. MediaTek chipset · Mediatek mt8910 firmware · Mediatek mt6991 firmware · Mediatek mt6993 firmware

    In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748.

  16. CVE-2026-20474 6.0 Moyenne

    MediaTek, Inc. MediaTek chipset · Mediatek mt6991 firmware · Mediatek mt6993 firmware · Mediatek mt8126 firmware

    In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019183; Issue ID: MSV-7758.

  17. CVE-2026-20473 6.0 Moyenne

    MediaTek, Inc. MediaTek chipset · Mediatek mt6991 firmware · Mediatek mt8910 firmware · Mediatek mt6993 firmware

    In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019722; Issue ID: MSV-7759.