Threat database

In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01645293; Issue ID: MSV-6761.

CVE-2026-20542 is a use-after-free vulnerability in the apusys component of MediaTek chipsets. This memory corruption flaw can lead to local privilege escalation if the attacker already has System privileges. Exploitation does not require user interaction. Multiple MediaTek chipset versions are affected. The vulnerability has a medium severity rating with a CVSS score of 6.7.

In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8911.

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8912.

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8913.

In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8914.

CVE-2026-20537 is a use-after-free vulnerability in the aidl component of MediaTek chipsets. It can cause memory corruption leading to local privilege escalation if the attacker already has System privileges. Exploitation does not require user interaction. The vulnerability affects multiple MediaTek chipset models.

CVE-2026-20536 is a use-after-free vulnerability in the aidl component of MediaTek chipsets. It can cause memory corruption and potentially lead to local privilege escalation if the attacker already has System privileges. Exploitation does not require user interaction. Multiple MediaTek chipset models are affected.

CVE-2026-20535 is a missing authorization vulnerability in MediaTek chipsets affecting multiple models. The flaw exists in the aidl component where a permission check is missing, potentially allowing a local attacker with existing System privileges to escalate their privileges further without user interaction. The vulnerability has a medium severity rating with a CVSS score of 6.7. No public exploits are known, and no patch links are provided in the available data.

In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01797547; Issue ID: MSV-9155.

CVE-2026-20533 is an integer overflow vulnerability in MediaTek chipsets that can lead to local escalation of privilege. Exploitation does not require user interaction but requires the attacker to already have System privilege. The vulnerability affects multiple MediaTek chipset versions and has a medium severity rating with a CVSS score of 6.7.

In apu, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249024; Issue ID: MSV-9168.

CVE-2026-20531 is a use-after-free vulnerability in the MediaTek chipset's apu component that can cause memory corruption. This flaw allows local attackers to escalate privileges without requiring additional execution privileges or user interaction. The vulnerability affects specific MediaTek chipset models. A patch has been identified by MediaTek under Patch ID ALPS11249016.

CVE-2026-20530 is an out-of-bounds write vulnerability in MediaTek chipsets caused by a missing bounds check in the display component. This flaw can lead to local privilege escalation if the attacker already has System privileges. Exploitation does not require user interaction. Multiple MediaTek chipset models are affected. The vulnerability has a medium severity rating with a CVSS score of 6.7.

CVE-2026-20529 is an out-of-bounds write vulnerability in MediaTek chipsets' battery component caused by a missing bounds check. It allows local escalation of privilege if the attacker already has System privileges. Exploitation does not require user interaction. The vulnerability affects multiple MediaTek chipset models. The CVSS score is 6.7, indicating medium severity.

CVE-2026-20528 is an out-of-bounds write and read vulnerability in MediaTek chipsets due to a missing bounds check in the ccci component. Exploitation requires local system privilege and user interaction. Successful exploitation can lead to local information disclosure, memory corruption, crashes, or privilege escalation. The vulnerability affects specific MediaTek chipset models including MT2735, MT2737, MT6813, MT6880, MT6890, MT6986, MT6988, and MT6990. The CVSS score is 6.7, indicating a medium severity level.

In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11049530 / ALPS11480843; Issue ID: MSV-7935.

CVE-2026-20588 is an out-of-bounds write vulnerability (CWE-787) in MediaTek chipsets that could allow local escalation of privilege. Exploitation requires the attacker to already have System privilege, and no user interaction is needed. The vulnerability affects multiple MediaTek chipset models. The CVSS score is 6.7, indicating a medium severity level.

CVE-2026-20587 is a type confusion vulnerability (CWE-843) in MediaTek chipsets that could allow a local attacker with System privileges to escalate their privileges further. Exploitation does not require user interaction. The vulnerability affects multiple MediaTek chipset models. The CVSS score is 6.7, indicating a medium severity level.

CVE-2026-20579 is an out-of-bounds write vulnerability in MediaTek chipsets caused by type confusion in the vdec component. It allows local escalation of privilege if the attacker already has System privileges. Exploitation does not require user interaction. The vulnerability affects multiple MediaTek chipset models. The CVSS score is 6.7, indicating medium severity.