Threat database

In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01879164; Issue ID: MSV-9846.

CVE-2026-20577 is a vulnerability in MediaTek chipsets that involves improper handling of insufficient permissions, leading to a permissions bypass in the modem component. Exploitation does not require user interaction but requires the attacker to already have System privileges. Successful exploitation could cause a local denial of service. Multiple MediaTek chipset models are affected.

CVE-2026-20576 is an integer underflow vulnerability in the MediaTek chipset affecting multiple specific models. It involves a missing bounds check in the afe component that can cause an out-of-bounds write. Exploitation requires the attacker to already have System privilege and does not require user interaction. A patch identified as ALPS11431385 addresses the issue.

CVE-2026-20575 is a type confusion vulnerability in MediaTek chipsets that can cause memory corruption via use-after-free. Exploitation does not require user interaction but requires the attacker to already have System privilege. This flaw could lead to local privilege escalation on affected MediaTek chipset models.

CVE-2026-20574 is a type confusion vulnerability (CWE-843) in MediaTek chipsets that can cause memory corruption due to use-after-free. Exploitation could lead to local privilege escalation if the attacker already has System privileges. No user interaction is required for exploitation. Multiple MediaTek chipset models are affected.

CVE-2026-20573 is a double free vulnerability in the afe component of MediaTek chipsets. This memory corruption flaw can lead to local privilege escalation if an attacker already has System privileges. Exploitation does not require user interaction. Multiple MediaTek chipset versions are affected.

CVE-2026-20572 is an integer underflow vulnerability in MediaTek chipsets affecting multiple models. The flaw exists in the adsp component and can cause an out-of-bounds write due to an integer overflow. Exploitation requires the attacker to already have System privilege and does not require user interaction. This vulnerability could lead to local privilege escalation.

CVE-2026-20571 is a type confusion vulnerability (CWE-843) in MediaTek chipsets that can cause memory corruption due to use-after-free. Exploitation does not require user interaction but requires the attacker to already have System privilege. This flaw could lead to local privilege escalation on affected MediaTek chipset models.

CVE-2026-20570 is a use-after-free vulnerability in the adsp component of MediaTek chipsets. It can lead to local escalation of privilege if an attacker already has System privilege. Exploitation does not require user interaction. Multiple MediaTek chipset models are affected.

CVE-2026-20569 is a use-after-free vulnerability in the MediaTek chipset's adsp component that can cause memory corruption. Exploitation requires the attacker to already have System privilege, and no user interaction is needed. This vulnerability could allow local escalation of privilege on affected MediaTek chipsets.

CVE-2026-20568 is a use-after-free vulnerability in the afe component of MediaTek chipsets. This flaw can cause a system crash and potentially allow local privilege escalation if the attacker already has System privileges. Exploitation does not require user interaction. A patch is identified by Patch ID ALPS11439283.

CVE-2026-20567 is an out-of-bounds write vulnerability in the MediaTek chipset's afe component caused by a missing bounds check. Exploitation does not require user interaction but requires the attacker to already have System privilege. This flaw could lead to local escalation of privilege. A patch is identified by Patch ID ALPS11431394.

CVE-2026-20566 is an out-of-bounds write vulnerability in MediaTek chipsets' modem component caused by a missing bounds check. Exploitation requires user interaction and a malicious actor with System privilege. Successful exploitation could lead to remote denial of service if a UE connects to a rogue base station controlled by the attacker. A patch is available identified by Patch ID MOLY01923663 / ALPS11315955.

CVE-2026-20565 is an out-of-bounds write vulnerability in MediaTek chipsets caused by an incorrect bounds check in the modem component. This flaw allows local escalation of privilege without requiring additional execution privileges or user interaction. Multiple MediaTek chipset models are affected.

CVE-2026-20564 is an out-of-bounds write vulnerability in MediaTek chipsets' modem component caused by an incorrect bounds check. Exploitation can lead to a local denial of service without requiring additional privileges or user interaction. Multiple MediaTek chipset models are affected.

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01777997; Issue ID: MSV-8905.

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01775984; Issue ID: MSV-8907.

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01750090; Issue ID: MSV-8908.

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01870543; Issue ID: MSV-9070.

CVE-2026-20559 is a use-after-free vulnerability in the GPU pdma component of MediaTek chipsets MT6993 and MT8910. It can cause memory corruption leading to local privilege escalation without requiring user interaction.