Threat database

In apu, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249024; Issue ID: MSV-9168.

CVE-2026-20531 is a use-after-free vulnerability in the MediaTek chipset's apu component that can cause memory corruption. This flaw allows local attackers to escalate privileges without requiring additional execution privileges or user interaction. The vulnerability affects specific MediaTek chipset models. A patch has been identified by MediaTek under Patch ID ALPS11249016.

CVE-2026-20530 is an out-of-bounds write vulnerability in MediaTek chipsets caused by a missing bounds check in the display component. This flaw can lead to local privilege escalation if the attacker already has System privileges. Exploitation does not require user interaction. Multiple MediaTek chipset models are affected. The vulnerability has a medium severity rating with a CVSS score of 6.7.

CVE-2026-20529 is an out-of-bounds write vulnerability in MediaTek chipsets' battery component caused by a missing bounds check. It allows local escalation of privilege if the attacker already has System privileges. Exploitation does not require user interaction. The vulnerability affects multiple MediaTek chipset models. The CVSS score is 6.7, indicating medium severity.

CVE-2026-20528 is an out-of-bounds write and read vulnerability in MediaTek chipsets due to a missing bounds check in the ccci component. Exploitation requires local system privilege and user interaction. Successful exploitation can lead to local information disclosure, memory corruption, crashes, or privilege escalation. The vulnerability affects specific MediaTek chipset models including MT2735, MT2737, MT6813, MT6880, MT6890, MT6986, MT6988, and MT6990. The CVSS score is 6.7, indicating a medium severity level.

In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11049530 / ALPS11480843; Issue ID: MSV-7935.

CVE-2026-20588 is an out-of-bounds write vulnerability (CWE-787) in MediaTek chipsets that could allow local escalation of privilege. Exploitation requires the attacker to already have System privilege, and no user interaction is needed. The vulnerability affects multiple MediaTek chipset models. The CVSS score is 6.7, indicating a medium severity level.

CVE-2026-20587 is a type confusion vulnerability (CWE-843) in MediaTek chipsets that could allow a local attacker with System privileges to escalate their privileges further. Exploitation does not require user interaction. The vulnerability affects multiple MediaTek chipset models. The CVSS score is 6.7, indicating a medium severity level.

CVE-2026-20579 is an out-of-bounds write vulnerability in MediaTek chipsets caused by type confusion in the vdec component. It allows local escalation of privilege if the attacker already has System privileges. Exploitation does not require user interaction. The vulnerability affects multiple MediaTek chipset models. The CVSS score is 6.7, indicating medium severity.

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01864925 / MOLY01210562; Issue ID: MSV-8303.

CVE-2026-20526 is a high severity out-of-bounds write vulnerability in MediaTek chipsets' modem component. It arises from a missing bounds check and can be exploited remotely if a user equipment (UE) connects to a rogue base station controlled by an attacker. Exploitation requires user interaction but no additional execution privileges. The vulnerability affects multiple MediaTek chipset models. No explicit patch information is provided in the input data.

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01870473 / MOLY00814393; Issue ID: MSV-9041.

CVE-2026-20524 is a high-severity vulnerability in MediaTek chipsets involving improper validation of specified index, position, or offset in input within the apu component. This flaw can cause memory corruption leading to local privilege escalation without requiring additional execution privileges or user interaction. A patch identified as ALPS11249004 addresses this issue.

CVE-2026-20523 is a high-severity vulnerability in MediaTek chipsets caused by an out-of-bounds write due to a missing bounds check in neuropilot. This flaw allows local privilege escalation without requiring user interaction or additional execution privileges. Multiple MediaTek chipset models are affected.

CVE-2026-20522 is a high-severity vulnerability in MediaTek chipsets involving an out-of-bounds write in the neuropilot component due to a missing bounds check. This flaw allows local privilege escalation without requiring user interaction or additional execution privileges. Multiple MediaTek chipset models are affected. No information about an available patch is provided.

CVE-2026-20521 is a high-severity stack-based buffer overflow vulnerability in MediaTek chipsets affecting multiple specific models. The flaw exists in the Video HAL component due to a missing bounds check, allowing local escalation of privilege without requiring user interaction or additional execution privileges. This vulnerability could lead to full compromise of confidentiality, integrity, and availability on affected devices.

CVE-2026-20589 is an out-of-bounds write vulnerability in MediaTek chipsets caused by type confusion in the venc component. Exploitation requires local access with System privilege and no user interaction is needed. The vulnerability could lead to escalation of privileges and impacts confidentiality, integrity, and availability. The CVSS score is 6.7, indicating a medium severity level. Multiple MediaTek chipset models are affected. No explicit patch or remediation status is provided in the available data.

CVE-2026-20586 is a high-severity vulnerability in MediaTek chipsets involving an out-of-bounds write in the video decoder (vdec) component due to a missing bounds check. Exploitation requires user interaction and can lead to remote escalation of privilege without needing additional execution privileges.

CVE-2026-20520 is an out-of-bounds write vulnerability in MediaTek chipsets' modem component caused by a missing bounds check. This flaw could allow remote escalation of privilege if a user equipment (UE) connects to a rogue base station controlled by an attacker. Exploitation does not require user interaction or additional execution privileges. The vulnerability affects multiple MediaTek chipset models. The CVSS score is 7.5, indicating high severity.

CVE-2026-20519 is a high-severity vulnerability in MediaTek chipsets caused by an out-of-bounds write due to a missing bounds check in the modem component. This flaw allows remote escalation of privilege if a user equipment (UE) connects to a rogue base station controlled by an attacker. Exploitation does not require user interaction or additional execution privileges. Multiple MediaTek chipset models are affected.