Threat database

305 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	5.5	EPSS 0.2%	CVE-2025-20689MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 · Out-of-bounds Read Medium5.5EPSS 0.2%2025-07-08CVE Database V5CVE-2025-20689 In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418048; Issue ID: MSV-3479. EPSS 0.2%Vulnerability MediaTek, Inc.#cwe-125	CVE Database V5	2025-07-08
Medium	5.5	EPSS 0.2%	CVE-2025-20688MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 · Out-of-bounds Read Medium5.5EPSS 0.2%2025-07-08CVE Database V5CVE-2025-20688 In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418047; Issue ID: MSV-3480. EPSS 0.2%Vulnerability MediaTek, Inc.#cwe-125	CVE Database V5	2025-07-08
Medium	5.5	EPSS 0.2%	CVE-2025-20687MT7902, MT7920, MT7921, MT7922, MT7925, MT7927 · Out-of-bounds Read Medium5.5EPSS 0.2%2025-07-08CVE Database V5CVE-2025-20687 In Bluetooth driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418045; Issue ID: MSV-3481. EPSS 0.2%Vulnerability MediaTek, Inc.#cwe-125	CVE Database V5	2025-07-08
High	8.8	EPSS 0.4%	CVE-2025-20686MT6890, MT7915, MT7916, MT7981, MT7986 · Heap Overflow High8.8EPSS 0.4%2025-07-08CVE Database V5CVE-2025-20686 In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00415570; Issue ID: MSV-3404. EPSS 0.4%Vulnerability MediaTek, Inc.#cwe-122	CVE Database V5	2025-07-08
High	8.8	EPSS 0.4%	CVE-2025-20685MT6890, MT7915, MT7916, MT7981, MT7986 · Heap Overflow High8.8EPSS 0.4%2025-07-08CVE Database V5CVE-2025-20685 In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416226; Issue ID: MSV-3409. EPSS 0.4%Vulnerability MediaTek, Inc.#cwe-122	CVE Database V5	2025-07-08
Critical	9.8	EPSS 0.6%	CVE-2025-20684MT7615, MT7622, MT7663 · Out-of-bounds Write Critical9.8EPSS 0.6%2025-07-08CVE Database V5CVE-2025-20684 In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416939; Issue ID: MSV-3422. EPSS 0.6%Vulnerability MediaTek, Inc.#cwe-787	CVE Database V5	2025-07-08
Critical	9.8	EPSS 0.6%	CVE-2025-20683MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 · Out-of-bounds Write Critical9.8EPSS 0.6%2025-07-08CVE Database V5CVE-2025-20683 In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416938; Issue ID: MSV-3444. EPSS 0.6%Vulnerability MediaTek, Inc.#cwe-787	CVE Database V5	2025-07-08
Critical	9.8	EPSS 0.6%	CVE-2025-20682MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 · Out-of-bounds Write Critical9.8EPSS 0.6%2025-07-08CVE Database V5CVE-2025-20682 In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416937; Issue ID: MSV-3445. EPSS 0.6%Vulnerability MediaTek, Inc.#cwe-787	CVE Database V5	2025-07-08
Critical	9.8	EPSS 0.6%	CVE-2025-20681MT6890, MT7615, MT7622, MT7663, MT7915 · Out-of-bounds Write Critical9.8EPSS 0.6%2025-07-08CVE Database V5CVE-2025-20681 In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416936; Issue ID: MSV-3446. EPSS 0.6%Vulnerability MediaTek, Inc.#cwe-787	CVE Database V5	2025-07-08
Critical	9.8	EPSS 0.8%	CVE-2025-20680MT7902, MT7920, MT7921, MT7922, MT7925, MT7927 · Heap Overflow Critical9.8EPSS 0.8%2025-07-08CVE Database V5CVE-2025-20680 In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418044; Issue ID: MSV-3482. EPSS 0.8%Vulnerability MediaTek, Inc.#cwe-122	CVE Database V5	2025-07-08
Medium	6.5	EPSS 0.4%	CVE-2025-20678MT6739, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6771, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6785U, MT6789, MT6813, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8667, MT8673, MT8675, MT8676, MT8678, MT8765, MT8766, MT8766R, MT8768, MT8771, MT8781, MT8786, MT8788, MT8788E, MT8789, MT8791, MT8791T, MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893 · Uncontrolled Recursion Medium6.5EPSS 0.4%2025-06-02CVE Database V5CVE-2025-20678 In ims service, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01394606; Issue ID: MSV-2739. EPSS 0.4%Vulnerability MediaTek, Inc.#cwe-674	CVE Database V5	2025-06-02
Medium	5.5	EPSS 0.2%	CVE-2025-20677MT7902, MT7921, MT7922, MT7925, MT7927 · NULL Pointer Dereference Medium5.5EPSS 0.2%2025-06-02CVE Database V5CVE-2025-20677 In Bluetooth driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412256; Issue ID: MSV-3284. EPSS 0.2%Vulnerability MediaTek, Inc.#cwe-476	CVE Database V5	2025-06-02
Medium	5.5	EPSS 0.2%	CVE-2025-20676MT7902, MT7921, MT7922, MT7925, MT7927 · NULL Pointer Dereference Medium5.5EPSS 0.2%2025-06-02CVE Database V5CVE-2025-20676 In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412240; Issue ID: MSV-3293. EPSS 0.2%Vulnerability MediaTek, Inc.#cwe-476	CVE Database V5	2025-06-02
Medium	5.5	EPSS 0.2%	CVE-2025-20675MT7902, MT7921, MT7922, MT7925, MT7927 · NULL Pointer Dereference Medium5.5EPSS 0.2%2025-06-02CVE Database V5CVE-2025-20675 In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413201; Issue ID: MSV-3302. EPSS 0.2%Vulnerability MediaTek, Inc.#cwe-476	CVE Database V5	2025-06-02
Critical	9.8	EPSS 0.8%	CVE-2025-20674MT6890, MT6990, MT7915, MT7916, MT7981, MT7986, MT7990, MT7992, MT7993 · Incorrect Authorization Critical9.8EPSS 0.8%2025-06-02CVE Database V5CVE-2025-20674 In wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413202; Issue ID: MSV-3303. EPSS 0.8%Vulnerability MediaTek, Inc.#cwe-863	CVE Database V5	2025-06-02
Medium	5.5	EPSS 0.2%	CVE-2025-20673MT7902, MT7921, MT7922, MT7925, MT7927 · NULL Pointer Dereference Medium5.5EPSS 0.2%2025-06-02CVE Database V5CVE-2025-20673 In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413200; Issue ID: MSV-3304. EPSS 0.2%Vulnerability MediaTek, Inc.#cwe-476	CVE Database V5	2025-06-02
Critical	9.8	EPSS 0.6%	CVE-2025-20672MT7902, MT7921, MT7922, MT7925, MT7927 · Heap Overflow Critical9.8EPSS 0.6%2025-06-02CVE Database V5CVE-2025-20672 In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412257; Issue ID: MSV-3292. EPSS 0.6%Vulnerability MediaTek, Inc.#cwe-122	CVE Database V5	2025-06-02
Medium	6.7	EPSS <0.1%	CVE-2025-20662MT9972 · Out-of-bounds Read Medium6.7EPSS <0.1%2025-04-07CVE Database V5CVE-2025-20662 In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04428276; Issue ID: MSV-3184. EPSS <0.1%Vulnerability MediaTek, Inc.#cwe-125	CVE Database V5	2025-04-07
Medium	6.7	EPSS <0.1%	CVE-2025-20661MT9972 · Out-of-bounds Read Medium6.7EPSS <0.1%2025-04-07CVE Database V5CVE-2025-20661 In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04436357; Issue ID: MSV-3185. EPSS <0.1%Vulnerability MediaTek, Inc.#cwe-125	CVE Database V5	2025-04-07
Medium	6.7	EPSS <0.1%	CVE-2025-20660MT9972 · Out-of-bounds Read Medium6.7EPSS <0.1%2025-04-07CVE Database V5CVE-2025-20660 In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04436357; Issue ID: MSV-3186. EPSS <0.1%Vulnerability MediaTek, Inc.#cwe-125	CVE Database V5	2025-04-07

Showing 261–280 of 305 results