Export limit exceeded: 425024 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 425024 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (47 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-20600 | 2 Mediatek, Mediatek, Inc. | 48 Mediatek Chipset, Mt2716, Mt2716 Firmware and 45 more | 2026-11-12 | 5.3 Medium |
| In Modem, there is a possible application crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01416152; Issue ID: MSV-7924. | ||||
| CVE-2026-68588 | 2 Mediatek, Mediatek, Inc. | 52 Mediatek Chipset, Mt2716, Mt2716 Firmware and 49 more | 2026-11-12 | 5.3 Medium |
| In Modem, there is a possible way (for XXX) to XXXXX due to an integer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01334054 / MOLY01312486; Issue ID: MSV-7920. | ||||
| CVE-2026-68589 | 2 Mediatek, Mediatek, Inc. | 114 Mediatek Chipset, Mt2716, Mt2716 Firmware and 111 more | 2026-11-12 | 6.7 Medium |
| In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: MOLY01320076; Issue ID: MSV-6889. | ||||
| CVE-2026-68590 | 2 Mediatek, Mediatek, Inc. | 114 Mediatek Chipset, Mt2716, Mt2716 Firmware and 111 more | 2026-11-12 | 5.3 Medium |
| In ip_stack, there is a possible out of bounds read due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01387180; Issue ID: MSV-5152. | ||||
| CVE-2026-20575 | 2 Mediatek, Mediatek, Inc. | 58 Mediatek Chipset, Mt6739, Mt6739 Firmware and 55 more | 2026-11-12 | 6.7 Medium |
| In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431394; Issue ID: MSV-9921. | ||||
| CVE-2026-20576 | 2 Mediatek, Mediatek, Inc. | 30 Mediatek Chipset, Mt6789, Mt6789 Firmware and 27 more | 2026-11-12 | 6.7 Medium |
| In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431385; Issue ID: MSV-9920. | ||||
| CVE-2026-20577 | 2 Mediatek, Mediatek, Inc. | 52 Mediatek Chipset, Mt2716, Mt2716 Firmware and 49 more | 2026-11-12 | 4.4 Medium |
| In Modem, there is a possible permission bypass due to a permissions bypass. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: MOLY01880753; Issue ID: MSV-9866. | ||||
| CVE-2026-20578 | 2 Mediatek, Mediatek, Inc. | 48 Mediatek Chipset, Mt2716, Mt2716 Firmware and 45 more | 2026-11-12 | 5.3 Medium |
| In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01879164; Issue ID: MSV-9846. | ||||
| CVE-2026-20580 | 2 Mediatek, Mediatek, Inc. | 66 Mediatek Chipset, Mt2735, Mt2735 Firmware and 63 more | 2026-11-12 | 4.4 Medium |
| In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11412004; Issue ID: MSV-9752. | ||||
| CVE-2026-20581 | 2 Mediatek, Mediatek, Inc. | 18 Mediatek Chipset, Mt6858, Mt6858 Firmware and 15 more | 2026-11-12 | 6.7 Medium |
| In usb, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11411985; Issue ID: MSV-9750. | ||||
| CVE-2026-20583 | 2 Mediatek, Mediatek, Inc. | 72 Mediatek Chipset, Mt6739, Mt6739 Firmware and 69 more | 2026-11-12 | 4.4 Medium |
| In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11411916; Issue ID: MSV-9747. | ||||
| CVE-2026-20584 | 2 Mediatek, Mediatek, Inc. | 60 Mediatek Chipset, Mt6739, Mt6739 Firmware and 57 more | 2026-11-12 | 6.7 Medium |
| In usb, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11411916; Issue ID: MSV-9746. | ||||
| CVE-2026-20585 | 2 Mediatek, Mediatek, Inc. | 70 Mediatek Chipset, Mt2716, Mt2716 Firmware and 67 more | 2026-11-12 | 7.5 High |
| In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01338165; Issue ID: MSV-9660. | ||||
| CVE-2026-20592 | 2 Mediatek, Mediatek, Inc. | 52 Mediatek Chipset, Mt2716, Mt2716 Firmware and 49 more | 2026-11-12 | 4.1 Medium |
| In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: MOLY01744265; Issue ID: MSV-9505. | ||||
| CVE-2026-20593 | 2 Mediatek, Mediatek, Inc. | 156 Mediatek Chipset, Mt2716, Mt2716 Firmware and 153 more | 2026-11-12 | 5.3 Medium |
| In Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01707455; Issue ID: MSV-9503. | ||||
| CVE-2026-20594 | 2 Mediatek, Mediatek, Inc. | 114 Mediatek Chipset, Mt2716, Mt2716 Firmware and 111 more | 2026-11-12 | 5.3 Medium |
| In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01349680 / MOLY01369097; Issue ID: MSV-9364. | ||||
| CVE-2026-20595 | 2 Mediatek, Mediatek, Inc. | 96 Mediatek Chipset, Mt6739, Mt6739 Firmware and 93 more | 2026-11-12 | 6.7 Medium |
| In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11263078; Issue ID: MSV-9001. | ||||
| CVE-2026-20596 | 2 Mediatek, Mediatek, Inc. | 156 Mediatek Chipset, Mt2716, Mt2716 Firmware and 153 more | 2026-11-12 | 5.3 Medium |
| In Modem, there is a possible out of bounds read due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01758225; Issue ID: MSV-8910. | ||||
| CVE-2026-20597 | 2 Mediatek, Mediatek, Inc. | 156 Mediatek Chipset, Mt2716, Mt2716 Firmware and 153 more | 2026-11-12 | 5.3 Medium |
| In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01758223; Issue ID: MSV-8909. | ||||
| CVE-2026-20598 | 2 Mediatek, Mediatek, Inc. | 48 Mediatek Chipset, Mt2716, Mt2716 Firmware and 45 more | 2026-11-12 | 5.3 Medium |
| In Modem, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01755742; Issue ID: MSV-8896. | ||||