MC
Product
MediaTek chipset
104
CVEs
0
On KEV
8.8
Max CVSS
31
New 30D
Severity mix
Critical 0High 20Medium 84Low 0
Watch
Add MediaTek chipset to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-20586 | 8.8 | Oct 5 | In vdec, there is a possible out of bounds write due to a missing bounds check Affected: MT2718; MT6768; MT6769; MT6789; MT6833; MT6855; +16 more |
| CVE-2026-20433 | 8.8 | Apr 7 | In Modem, there is a possible out of bounds write due to a missing bounds check Affected: MT2735; MT2737; MT6813; MT6833; MT6833P; MT6835; +34 more |
| CVE-2026-20531 | 8.4 | Oct 5 | In apu, there is a possible memory corruption due to use after free Affected: MT6899; MT6993; MT8668; MT8781; MT8793; MT8910 |
| CVE-2026-20524 | 8.4 | Oct 5 | In apu, there is a possible memory corruption due to improper input validation Affected: MT6899; MT6993; MT8668; MT8781; MT8793; MT8910 |
| CVE-2026-20523 | 8.4 | Oct 5 | In neuropilot, there is a possible out of bounds write due to a missing bounds check Affected: MT6881; MT6993; MT8188; MT8189; MT8668; MT8781; +3 more |
| CVE-2026-20522 | 8.4 | Oct 5 | In neuropilot, there is a possible out of bounds write due to a missing bounds check Affected: MT6881; MT6993; MT8188; MT8189; MT8668; MT8781; +2 more |
| CVE-2026-20521 | 8.4 | Oct 5 | In Video HAL, there is a possible escalation of privilege due to a missing bounds check Affected: MT2718; MT6768; MT6769; MT6781; MT6789; MT6833; +34 more |
| CVE-2026-20502 | 8.4 | Sep 7 | In vdec, there is a possible out of bounds write due to a missing bounds check Affected: MT2718; MT6580; MT6739; MT6761; MT6765; MT6768; +34 more |
| CVE-2026-20501 | 8.4 | Sep 7 | In vdec, there is a possible out of bounds write due to a heap buffer overflow Affected: MT2718; MT6580; MT6739; MT6761; MT6765; MT6768; +34 more |
| CVE-2026-20465 | 8.1 | Aug 3 | In wlan AP driver, there is a possible out of bounds write due to a missing bounds check Affected: MT6890; MT7915; MT7916; MT7981; MT7986 |
| CVE-2026-20452 | 8.0 | Jun 1 | In wlan AP driver, there is a possible memory corruption due to a heap buffer overflow Affected: MT6890; MT7615; MT7915; MT7916; MT7981; MT7986; +3 more |
| CVE-2026-20432 | 8.0 | Apr 7 | In Modem, there is a possible out of bounds write due to a missing bounds check Affected: MT2735; MT2737; MT6779; MT6781; MT6783; MT6785; +34 more |
| CVE-2026-20495 | 7.8 | Aug 3 | In Bluetooth driver, there is a possible permission bypass due to a missing permission check Affected: MT7902; MT7920; MT7921; MT7922; MT7925; MT7927 |
| CVE-2026-20455 | 7.8 | Jun 1 | In geniezone, there is a possible out of bounds write due to a missing bounds check Affected: MT6739; MT6761; MT6765; MT6768; MT6781; MT6789; +30 more |
| CVE-2026-20483 | 7.7 | Aug 3 | In Telephony, there is a possible escalation of privilege due to a missing permission check Affected: MT6739; MT6761; MT6765; MT6768; MT6781; MT6789; +29 more |
| CVE-2026-20526 | 7.5 | Oct 5 | In Modem, there is a possible out of bounds write due to a missing bounds check Affected: MT2716; MT2735; MT2737; MT6813; MT6815; MT6833; +34 more |
| CVE-2026-20520 | 7.5 | Oct 5 | In Modem, there is a possible out of bounds write due to a missing bounds check Affected: MT2716; MT2735; MT2737; MT6813; MT6815; MT6833; +34 more |
| CVE-2026-20519 | 7.5 | Oct 5 | In Modem, there is a possible out of bounds write due to a missing bounds check Affected: MT2716; MT2735; MT2737; MT6813; MT6815; MT6833; +34 more |
| CVE-2026-20479 | 7.5 | Aug 3 | In Modem, there is a possible out of bounds read due to a missing bounds check Affected: MT2735; MT6833; MT6853; MT6855; MT6873; MT6875; +13 more |
| CVE-2026-20458 | 7.5 | Jul 1 | In Modem, there is a possible memory corruption due to a missing bounds check Affected: MT2716; MT2737; MT6739; MT6761; MT6762; MT6763; +34 more |
| CVE-2026-20544 | 6.8 | Oct 5 | In meta, there is a possible out of bounds write due to a missing bounds check Affected: MT6739; MT6761; MT6765; MT6768; MT6769; MT6781; +34 more |
| CVE-2026-20542 | 6.7 | Oct 5 | In apusys, there is a possible memory corruption due to use after free Affected: MT2718; MT6878; MT6897; MT6899; MT6989; MT6991; +13 more |
| CVE-2026-20537 | 6.7 | Oct 5 | In aidl, there is a possible memory corruption due to use after free Affected: MT6878; MT6881; MT6899; MT6989; MT6991; MT6993; +5 more |
| CVE-2026-20536 | 6.7 | Oct 5 | In aidl, there is a possible memory corruption due to use after free Affected: MT6878; MT6881; MT6899; MT6989; MT6991; MT6993; +7 more |
| CVE-2026-20535 | 6.7 | Oct 5 | In aidl, there is a possible escalation of privilege due to a missing permission check Affected: MT6878; MT6881; MT6899; MT6989; MT6991; MT6993; +6 more |
| CVE-2026-20533 | 6.7 | Oct 5 | In display, there is a possible escalation of privilege due to an integer overflow Affected: MT6739; MT6761; MT6765; MT6768; MT6781; MT6789; +27 more |
| CVE-2026-20530 | 6.7 | Oct 5 | In display, there is a possible out of bounds write due to a missing bounds check Affected: MT2718; MT6991; MT6993; MT8126; MT8171; MT8188; +5 more |
| CVE-2026-20529 | 6.7 | Oct 5 | In battery, there is a possible out of bounds write due to a missing bounds check Affected: MT6761; MT6765; MT6768; MT6781; MT6853; MT6858; +22 more |
| CVE-2026-20528 | 6.7 | Oct 5 | In ccci, there is a possible out of bounds write and read due to a missing bounds check Affected: MT2735; MT2737; MT6813; MT6880; MT6890; MT6980D; +4 more |
| CVE-2026-20588 | 6.7 | Oct 5 | In mtee, there is a possible escalation of privilege due to a missing bounds check Affected: MT2718; MT6768; MT6769; MT6789; MT6833; MT6855; +16 more |
| CVE-2026-20587 | 6.7 | Oct 5 | In mtee, there is a possible escalation of privilege due to type confusion Affected: MT2718; MT6768; MT6769; MT6789; MT6833; MT6855; +16 more |
| CVE-2026-20579 | 6.7 | Oct 5 | In vdec, there is a possible out of bounds write due to type confusion Affected: MT2718; MT6768; MT6769; MT6789; MT6833; MT6855; +16 more |
| CVE-2026-20589 | 6.7 | Oct 5 | In venc, there is a possible out of bounds write due to type confusion Affected: MT2718; MT6768; MT6769; MT6789; MT6833; MT6855; +16 more |
| CVE-2026-20517 | 6.7 | Sep 7 | In geniezone, there is a possible escalation of privilege due to use after free Affected: MT6991; MT8755; MT8768; MT8771; MT8775; MT8781; +11 more |
| CVE-2026-20512 | 6.7 | Sep 7 | In Audio HAL, there is a possible escalation of privilege due to improper input validation Affected: MT2718; MT6769; MT6781; MT6789; MT6833; MT6835; +34 more |
| CVE-2026-20511 | 6.7 | Sep 7 | In SurfaceFlinger, there is a possible memory corruption due to use after free Affected: MT6858; MT6881; MT6993; MT8668 |
| CVE-2026-20510 | 6.7 | Sep 7 | In camera middleware, there is a possible escalation of privilege due to double free Affected: MT6761; MT6765; MT6768; MT6789; MT6833; MT6835; +11 more |
| CVE-2026-20509 | 6.7 | Sep 7 | In Power HAL, there is a possible out of bounds write due to a missing bounds check Affected: MT2718; MT6739; MT6761; MT6765; MT6768; MT6769; +34 more |
| CVE-2026-20508 | 6.7 | Sep 7 | In Power HAL, there is a possible escalation of privilege due to type confusion Affected: MT2718; MT6739; MT6761; MT6765; MT6768; MT6769; +34 more |
| CVE-2026-20507 | 6.7 | Sep 7 | In Audio HAL, there is a possible escalation of privilege due to use after free Affected: MT2718; MT6739; MT6761; MT6765; MT6768; MT6769; +34 more |
| CVE-2026-20506 | 6.7 | Sep 7 | In Audio HAL, there is a possible escalation of privilege due to use after free Affected: MT2718; MT6739; MT6761; MT6765; MT6768; MT6769; +34 more |
| CVE-2026-20486 | 6.7 | Aug 3 | In imgsensor, there is a possible application crash due to incorrect error handling Affected: MT2718; MT6878; MT6895; MT6991; MT6993; MT8370; +5 more |
| CVE-2026-20463 | 6.7 | Jul 1 | In Modem, there is a possible escalation of privilege due to a permissions bypass Affected: MT2716; MT2735; MT2737; MT6739; MT6761; MT6762; +34 more |
| CVE-2026-20462 | 6.7 | Jul 1 | In Telephony, there is a possible memory corruption due to a heap buffer overflow Affected: MT6739; MT6761; MT6765; MT6768; MT6781; MT6789; +16 more |
| CVE-2026-20453 | 6.7 | Jun 1 | In geniezone, there is a possible out of bounds write due to a missing bounds check Affected: MT6739; MT6761; MT6765; MT6768; MT6781; MT6789; +30 more |
| CVE-2026-20451 | 6.7 | May 4 | In slbc, there is a possible out of bounds write due to type confusion Affected: MT2718; MT6899; MT6985; MT6989; MT6991; MT8115; +26 more |
| CVE-2026-20448 | 6.7 | May 4 | In geniezone, there is a possible escalation of privilege due to a missing permission check Affected: MT6765; MT6768; MT6789; MT6877; MT6897; MT6899; +16 more |
| CVE-2026-20447 | 6.7 | May 4 | In geniezone, there is a possible escalation of privilege due to a missing bounds check Affected: MT6768; MT6789; MT6877; MT6899; MT6989; MT6991; +11 more |
| CVE-2026-20482 | 6.5 | Aug 3 | In wlan STA FW, there is a possible system becoming unresponsive due to logging Affected: MT7902; MT7921; MT7922; MT8518S; MT8532 |
| CVE-2026-20464 | 6.5 | Aug 3 | In hevc decoder, there is a possible out of bounds write due to an integer overflow Affected: MT6761; MT8766; MT8768 |
