Filtered by vendor Mediatek Subscriptions
Filtered by product Mt6895 Subscriptions
Total 546 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-20571 2 Mediatek, Mediatek, Inc. 84 Mediatek Chipset, Mt6739, Mt6739 Firmware and 81 more 2026-11-13 6.7 Medium
In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11434319; Issue ID: MSV-9925.
CVE-2026-20568 2 Mediatek, Mediatek, Inc. 84 Mediatek Chipset, Mt6739, Mt6739 Firmware and 81 more 2026-11-13 6.7 Medium
In afe, there is a possible system crash due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11439283; Issue ID: MSV-10003.
CVE-2026-68589 2 Mediatek, Mediatek, Inc. 114 Mediatek Chipset, Mt2716, Mt2716 Firmware and 111 more 2026-11-12 6.7 Medium
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: MOLY01320076; Issue ID: MSV-6889.
CVE-2026-68590 2 Mediatek, Mediatek, Inc. 114 Mediatek Chipset, Mt2716, Mt2716 Firmware and 111 more 2026-11-12 5.3 Medium
In ip_stack, there is a possible out of bounds read due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01387180; Issue ID: MSV-5152.
CVE-2026-68591 2 Mediatek, Mediatek, Inc. 46 Mediatek Chipset, Mt2737, Mt2737 Firmware and 43 more 2026-11-12 6.7 Medium
In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege (EoP) if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09608864 / ALPS09327759; Issue ID: MSV-2958.
CVE-2026-20573 2 Mediatek, Mediatek, Inc. 72 Mediatek Chipset, Mt2735, Mt2735 Firmware and 69 more 2026-11-12 6.7 Medium
In afe, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431412; Issue ID: MSV-9923.
CVE-2026-20574 2 Mediatek, Mediatek, Inc. 72 Mediatek Chipset, Mt2735, Mt2735 Firmware and 69 more 2026-11-12 6.7 Medium
In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431400; Issue ID: MSV-9922.
CVE-2026-20575 2 Mediatek, Mediatek, Inc. 58 Mediatek Chipset, Mt6739, Mt6739 Firmware and 55 more 2026-11-12 6.7 Medium
In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431394; Issue ID: MSV-9921.
CVE-2026-20576 2 Mediatek, Mediatek, Inc. 30 Mediatek Chipset, Mt6789, Mt6789 Firmware and 27 more 2026-11-12 6.7 Medium
In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431385; Issue ID: MSV-9920.
CVE-2026-20583 2 Mediatek, Mediatek, Inc. 72 Mediatek Chipset, Mt6739, Mt6739 Firmware and 69 more 2026-11-12 4.4 Medium
In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11411916; Issue ID: MSV-9747.
CVE-2026-20584 2 Mediatek, Mediatek, Inc. 60 Mediatek Chipset, Mt6739, Mt6739 Firmware and 57 more 2026-11-12 6.7 Medium
In usb, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11411916; Issue ID: MSV-9746.
CVE-2026-20585 2 Mediatek, Mediatek, Inc. 70 Mediatek Chipset, Mt2716, Mt2716 Firmware and 67 more 2026-11-12 7.5 High
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01338165; Issue ID: MSV-9660.
CVE-2026-20590 2 Mediatek, Mediatek, Inc. 64 Mediatek Chipset, Mt6739, Mt6739 Firmware and 61 more 2026-11-12 4.4 Medium
In display, there is a possible system crash due to a logic error. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11410704; Issue ID: MSV-9574.
CVE-2026-20593 2 Mediatek, Mediatek, Inc. 156 Mediatek Chipset, Mt2716, Mt2716 Firmware and 153 more 2026-11-12 5.3 Medium
In Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01707455; Issue ID: MSV-9503.
CVE-2026-20594 2 Mediatek, Mediatek, Inc. 114 Mediatek Chipset, Mt2716, Mt2716 Firmware and 111 more 2026-11-12 5.3 Medium
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01349680 / MOLY01369097; Issue ID: MSV-9364.
CVE-2026-20595 2 Mediatek, Mediatek, Inc. 96 Mediatek Chipset, Mt6739, Mt6739 Firmware and 93 more 2026-11-12 6.7 Medium
In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11263078; Issue ID: MSV-9001.
CVE-2026-20596 2 Mediatek, Mediatek, Inc. 156 Mediatek Chipset, Mt2716, Mt2716 Firmware and 153 more 2026-11-12 5.3 Medium
In Modem, there is a possible out of bounds read due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01758225; Issue ID: MSV-8910.
CVE-2026-20597 2 Mediatek, Mediatek, Inc. 156 Mediatek Chipset, Mt2716, Mt2716 Firmware and 153 more 2026-11-12 5.3 Medium
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01758223; Issue ID: MSV-8909.
CVE-2026-20599 2 Mediatek, Mediatek, Inc. 156 Mediatek Chipset, Mt2716, Mt2716 Firmware and 153 more 2026-11-12 6.7 Medium
In Modem, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: MOLY01790985; Issue ID: MSV-8148.
CVE-2025-20726 1 Mediatek 90 Lr12a, Modem, Mt2735 and 87 more 2026-11-04 7.5 High
In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01672598; Issue ID: MSV-4622.