Threat database

In HFRP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11049569; Issue ID: MSV-7931.

CVE-2026-20484 is a medium severity vulnerability in MediaTek chipsets that involves possible local information disclosure due to a missing permission check in the TFA component. Exploitation requires the attacker to already have System privileges, and no user interaction is needed. The vulnerability could allow disclosure of sensitive information but does not affect integrity or availability.

CVE-2026-20470 is a medium severity vulnerability in MediaTek chipsets related to improper export of Android application components in the Telephony module. The flaw arises from a missing permission check that could allow local information disclosure without requiring additional execution privileges or user interaction. Multiple MediaTek chipset models are affected. No official patch or remediation level has been confirmed yet.

In Telephony, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11087526; Issue ID: MSV-8243.

CVE-2026-20482 is a medium severity vulnerability in MediaTek chipset WLAN STA firmware that can cause the system to become unresponsive due to uncontrolled logging. This issue can be exploited remotely by an adjacent attacker without requiring user interaction or additional privileges, resulting in a denial of service condition.

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10965373; Issue ID: MSV-6935.

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10965550 / ALPS11393405; Issue ID: MSV-6941.

CVE-2026-20480 is a heap-based buffer overflow vulnerability in the Audio HAL component of MediaTek chipsets. It allows a local attacker with user privileges to cause a denial of service without requiring user interaction. The issue affects multiple MediaTek chipset models including MT2735, MT2737, MT6880, MT6890, MT6988, and MT6990. The vulnerability has a medium severity rating with a CVSS score of 5.5. No official patch or remediation level has been confirmed yet.

CVE-2026-20479 is a high-severity vulnerability in MediaTek chipsets involving an out-of-bounds read in the modem component due to a missing bounds check. This flaw can be exploited remotely without user interaction if a user equipment (UE) connects to a rogue base station controlled by an attacker. Exploitation may result in a denial of service condition. No additional execution privileges are required for exploitation. Multiple MediaTek chipset models are affected.

CVE-2026-20478 is an out-of-bounds write vulnerability in the Audio HAL component of MediaTek chipsets. It results from a heap buffer overflow and can cause a local denial of service. Exploitation requires user-level privileges but does not need user interaction. The issue affects specific MediaTek chipset models including MT2735, MT2737, MT6880, MT6890, MT6988, and MT6990. No official patch or remediation level has been confirmed yet.

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11009963; Issue ID: MSV-7658.

CVE-2026-20476 is an out-of-bounds read vulnerability in the ccci component of MediaTek chipsets MT6813, MT6986, and MT6988. It arises from a missing bounds check and requires local user privileges to exploit. No user interaction is needed to trigger the issue, which can cause a local denial of service by impacting availability. The vulnerability has a medium severity rating with a CVSS score of 5.5.

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748.

In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019183; Issue ID: MSV-7758.

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019722; Issue ID: MSV-7759.

CVE-2026-20472 is an out-of-bounds write vulnerability in MediaTek chipsets, specifically affecting the MT6986 model. The flaw exists in TFA due to a missing bounds check, which could allow a local attacker with System privileges to cause a denial of service. Exploitation does not require user interaction. The vulnerability has a medium severity rating with a CVSS score of 4.4.

CVE-2026-20471 is an out-of-bounds write vulnerability in MediaTek chipsets caused by a missing bounds check. It can lead to a local denial of service without requiring user interaction or additional privileges, but physical access to the device is needed. The issue affects multiple MediaTek chipset models including MT2735, MT2737, MT6813, MT6880, MT6890, MT6986, MT6988, and MT6990. The vulnerability has a medium severity rating with a CVSS score of 4.6. No confirmed patch or official remediation guidance is provided in the available data.

In trusted_mem, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: AUTO00834868; Issue ID: MSV-6533.

In apusys, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: AUTO00833804; Issue ID: MSV-6741.

In apusys, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: AUTO00837766; Issue ID: MSV-6767.