Recherche « Mediatek mt8367 firmware »
10 CVE
-
CVE-2026-20589 6.7 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt2718 firmware · Mediatek mt6768 firmware · Mediatek mt6769 firmware
In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9606.
-
CVE-2026-20588 6.7 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt2718 firmware · Mediatek mt6768 firmware · Mediatek mt6769 firmware
In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9607.
-
CVE-2026-20587 6.7 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt2718 firmware · Mediatek mt6768 firmware · Mediatek mt6769 firmware
In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9608.
-
CVE-2026-20586 8.8 Élevée
MediaTek, Inc. MediaTek chipset · Mediatek mt8910 firmware · Mediatek mt2718 firmware · Mediatek mt6768 firmware
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614.
-
CVE-2026-20579 6.7 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt2718 firmware · Mediatek mt6768 firmware · Mediatek mt6769 firmware
In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9800.
-
CVE-2026-20489 4.4 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt6991 firmware · Mediatek mt6993 firmware · Mediatek mt8126 firmware
In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004274; Issue ID: MSV-7749.
-
CVE-2026-20488 4.4 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt6991 firmware · Mediatek mt6993 firmware · Mediatek mt8126 firmware
In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7757.
-
CVE-2026-20475 6.0 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt8910 firmware · Mediatek mt6991 firmware · Mediatek mt6993 firmware
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748.
-
CVE-2026-20474 6.0 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt6991 firmware · Mediatek mt6993 firmware · Mediatek mt8126 firmware
In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019183; Issue ID: MSV-7758.
-
CVE-2026-20473 6.0 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt6991 firmware · Mediatek mt8910 firmware · Mediatek mt6993 firmware
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019722; Issue ID: MSV-7759.