Threat database

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01864925 / MOLY01210562; Issue ID: MSV-8303.

CVE-2026-20526 is a high severity out-of-bounds write vulnerability in MediaTek chipsets' modem component. It arises from a missing bounds check and can be exploited remotely if a user equipment (UE) connects to a rogue base station controlled by an attacker. Exploitation requires user interaction but no additional execution privileges. The vulnerability affects multiple MediaTek chipset models. No explicit patch information is provided in the input data.

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01870473 / MOLY00814393; Issue ID: MSV-9041.

CVE-2026-20524 is a high-severity vulnerability in MediaTek chipsets involving improper validation of specified index, position, or offset in input within the apu component. This flaw can cause memory corruption leading to local privilege escalation without requiring additional execution privileges or user interaction. A patch identified as ALPS11249004 addresses this issue.

CVE-2026-20523 is a high-severity vulnerability in MediaTek chipsets caused by an out-of-bounds write due to a missing bounds check in neuropilot. This flaw allows local privilege escalation without requiring user interaction or additional execution privileges. Multiple MediaTek chipset models are affected.

CVE-2026-20522 is a high-severity vulnerability in MediaTek chipsets involving an out-of-bounds write in the neuropilot component due to a missing bounds check. This flaw allows local privilege escalation without requiring user interaction or additional execution privileges. Multiple MediaTek chipset models are affected. No information about an available patch is provided.

CVE-2026-20521 is a high-severity stack-based buffer overflow vulnerability in MediaTek chipsets affecting multiple specific models. The flaw exists in the Video HAL component due to a missing bounds check, allowing local escalation of privilege without requiring user interaction or additional execution privileges. This vulnerability could lead to full compromise of confidentiality, integrity, and availability on affected devices.

CVE-2026-20589 is an out-of-bounds write vulnerability in MediaTek chipsets caused by type confusion in the venc component. Exploitation requires local access with System privilege and no user interaction is needed. The vulnerability could lead to escalation of privileges and impacts confidentiality, integrity, and availability. The CVSS score is 6.7, indicating a medium severity level. Multiple MediaTek chipset models are affected. No explicit patch or remediation status is provided in the available data.

CVE-2026-20586 is a high-severity vulnerability in MediaTek chipsets involving an out-of-bounds write in the video decoder (vdec) component due to a missing bounds check. Exploitation requires user interaction and can lead to remote escalation of privilege without needing additional execution privileges.

CVE-2026-20520 is an out-of-bounds write vulnerability in MediaTek chipsets' modem component caused by a missing bounds check. This flaw could allow remote escalation of privilege if a user equipment (UE) connects to a rogue base station controlled by an attacker. Exploitation does not require user interaction or additional execution privileges. The vulnerability affects multiple MediaTek chipset models. The CVSS score is 7.5, indicating high severity.

CVE-2026-20519 is a high-severity vulnerability in MediaTek chipsets caused by an out-of-bounds write due to a missing bounds check in the modem component. This flaw allows remote escalation of privilege if a user equipment (UE) connects to a rogue base station controlled by an attacker. Exploitation does not require user interaction or additional execution privileges. Multiple MediaTek chipset models are affected.

In geniezone, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS10867524 / ALPS10876355; Issue ID: MSV-6674.

CVE-2026-20517 is a use-after-free vulnerability in the geniezone component of MediaTek chipsets that could allow a local attacker with System privileges to escalate their privileges further. Exploitation does not require user interaction. The vulnerability affects multiple MediaTek chipset models. The CVSS score is 6.7, indicating a medium severity level.

In gpu, there is a possible system crash due to use after free. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11122991; Issue ID: MSV-8132.

In Audio HAL, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087632; Issue ID: MSV-8244.

In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087533; Issue ID: MSV-8245.

CVE-2026-20512 is a vulnerability in the Audio HAL component of MediaTek chipsets that allows local escalation of privilege due to improper input validation. Exploitation does not require user interaction but requires the attacker to already have System privilege. The vulnerability affects multiple MediaTek chipset models. The CVSS score is 6.7, indicating a medium severity level.

CVE-2026-20511 is a use-after-free vulnerability in the SurfaceFlinger component of MediaTek chipsets. It can cause memory corruption and potentially allow local privilege escalation if the attacker already has System privileges. Exploitation does not require user interaction. The vulnerability affects specific MediaTek chipset models MT6858, MT6881, MT6993, and MT8668. The CVSS score is 6.7, indicating a medium severity level.

CVE-2026-20510 is a double free vulnerability in the camera middleware of MediaTek chipsets. It can lead to local escalation of privilege if an attacker already has System privileges. Exploitation does not require user interaction. The vulnerability affects multiple MediaTek chipset versions. The CVSS score is 6.7, indicating a medium severity level.

CVE-2026-20509 is a stack-based buffer overflow vulnerability in the Power HAL component of MediaTek chipsets. The flaw arises from a missing bounds check, allowing an out-of-bounds write. Exploitation requires local access with System privileges but does not require user interaction. This vulnerability could lead to escalation of privileges and impacts confidentiality, integrity, and availability. A patch identified as ALPS11165543 addresses this issue.