Threat database

CVE-2026-20508 is a type confusion vulnerability in the Power HAL component of MediaTek chipsets. It allows local escalation of privilege if an attacker already has System privilege. Exploitation does not require user interaction. The vulnerability affects multiple MediaTek chipset versions. The CVSS score is 6.7, indicating a medium severity level.

CVE-2026-20507 is a use-after-free vulnerability in the Audio HAL component of MediaTek chipsets. It allows local escalation of privilege if an attacker already has System privileges. Exploitation does not require user interaction. The vulnerability affects multiple MediaTek chipset models. The CVSS score is 6.7, indicating a medium severity level.

CVE-2026-20506 is a use-after-free vulnerability in the Audio HAL component of MediaTek chipsets. It allows local escalation of privilege if the attacker already has System privileges. Exploitation does not require user interaction. The vulnerability affects multiple MediaTek chipset models. The CVSS score is 6.7, indicating a medium severity level.

In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11060069 / DTV04881615; Issue ID: MSV-7882.

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00755024; Issue ID: MSV-7865.

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01371002; Issue ID: MSV-9020.

CVE-2026-20502 is a heap-based buffer overflow vulnerability in MediaTek chipsets affecting multiple specific models. The flaw exists in the video decoder (vdec) component due to a missing bounds check, allowing out-of-bounds writes. Exploitation does not require user interaction or additional execution privileges and can lead to local privilege escalation. The vulnerability is rated high severity with a CVSS score of 8.4. No patch links are provided in the data, and the vendor advisory status is not explicitly stated.

CVE-2026-20501 is a heap-based buffer overflow vulnerability in the vdec component of MediaTek chipsets. It allows a local attacker to escalate privileges without requiring user interaction or additional execution privileges. The vulnerability affects multiple MediaTek chipset versions. The CVSS score is 8.4, indicating high severity.

In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01810811; Issue ID: MSV-9232.

In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10900493; Issue ID: MSV-6765.

CVE-2026-20496 is an out-of-bounds read vulnerability in MediaTek chipsets due to a missing bounds check in the geniezone component. Exploitation requires local system privilege but no user interaction. This flaw could lead to local denial of service. The vulnerability affects multiple MediaTek chipset models. No patch or official remediation has been confirmed yet.

In Bluetooth driver, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00488300; Issue ID: MSV-7296.

CVE-2026-20494 is an out-of-bounds read vulnerability in MediaTek chipsets related to WiFi functionality. The flaw arises from a missing bounds check, potentially allowing local information disclosure if an attacker already has System privileges. Exploitation does not require user interaction. The affected chipsets include MT6890, MT6988, and MT6990. The vulnerability has a medium severity rating with a CVSS score of 5.5.

CVE-2026-20493 is an out-of-bounds write vulnerability in MediaTek chipsets MT6890, MT6988, and MT6990 related to WiFi functionality. The flaw arises from a missing bounds check and can cause a local denial of service. Exploitation requires the attacker to already have System privileges, and no user interaction is needed. The vulnerability has a medium severity with a CVSS score of 4.4.

CVE-2026-20492 is a medium severity vulnerability in MediaTek chipsets affecting several models including MT2735, MT2737, MT6880, MT6890, MT6988, and MT6990. It involves a time-of-check to time-of-use (TOCTOU) race condition in the Audio HAL component that can cause the system to become unresponsive, resulting in a local denial of service. Exploitation requires user-level privileges but no user interaction. No official patch or remediation level has been confirmed yet.

CVE-2026-20491 is an out-of-bounds write vulnerability in MediaTek chipsets caused by an incorrect bounds check. It requires local user privileges to exploit and does not require user interaction. Successful exploitation can lead to a denial of service condition. The affected chipsets include MT2735, MT2737, MT6890, MT6988, and MT6990. The vulnerability has a medium severity rating with a CVSS score of 5.5.

CVE-2026-20490 is an out-of-bounds read vulnerability in the ccci component of MediaTek chipsets MT6813, MT6986, and MT6988. The flaw arises from a missing bounds check, potentially allowing a local attacker with System privileges to cause a denial of service. Exploitation does not require user interaction. The vulnerability has a medium severity rating with a CVSS score of 4.4.

CVE-2026-20489 is an out-of-bounds read vulnerability in MediaTek chipsets caused by an integer overflow in the display component. It can lead to local information disclosure if an attacker already has System privileges. Exploitation does not require user interaction. The vulnerability affects multiple MediaTek chipset models. The CVSS score is 4.4, indicating medium severity.

CVE-2026-20488 is a medium severity vulnerability in MediaTek chipsets involving an out-of-bounds read in the display component due to a missing bounds check. This flaw can lead to local information disclosure if an attacker already has System privileges. Exploitation does not require user interaction. Multiple MediaTek chipset models are affected. No official patch or remediation details are currently available.

In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11012302; Issue ID: MSV-7833.