Mediatek Inc Mediatek Chipset vulnerabilities

CVE-2025-20800 [HIGH] CWE-787 CVE-2025-20800: In mminfra, there is a possible out of bounds write due to a missing bounds check. This could lead t In mminfra, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10267349; Issue ID: MSV-5033.

CVE-2026-20419 [MEDIUM] CWE-754 CVE-2026-20419: In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught excepti In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught exception. This could lead to remote (proximal/adjacent) denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00461663 / WCNCR00463309; Issue ID: MSV-4852.

CVE-2025-20801 [HIGH] CWE-415 CVE-2025-20801: In seninf, there is a possible memory corruption due to a race condition. This could lead to local e In seninf, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10251210; Issue ID: MSV-4926.

CVE-2025-20779 [HIGH] CWE-416 CVE-2025-20779: In display, there is a possible use after free due to a race condition. This could lead to local esc In display, there is a possible use after free due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10184084; Issue ID: MSV-4720.

CVE-2026-20511 [MEDIUM] CWE-416 CVE-2026-20511: In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to l In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11123860; Issue ID: MSV-8890.

CVE-2026-20517 [MEDIUM] CWE-416 CVE-2026-20517: In geniezone, there is a possible escalation of privilege due to use after free. This could lead to In geniezone, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10900510; Issue ID: MSV-6781.

CVE-2026-20507 [MEDIUM] CWE-416 CVE-2026-20507: In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11191981; Issue ID: MSV-9125.

CVE-2026-20506 [MEDIUM] CWE-416 CVE-2026-20506: In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11191981; Issue ID: MSV-9126.

CVE-2026-20462 [MEDIUM] CWE-122 CVE-2026-20462: In Telephony, there is a possible memory corruption due to a heap buffer overflow. This could lead t In Telephony, there is a possible memory corruption due to a heap buffer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11006447; Issue ID: MSV-7871.

CVE-2026-20436 [MEDIUM] CWE-120 CVE-2026-20436: In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00473802; Issue ID: MSV-5970.

CVE-2026-20528 [MEDIUM] CWE-787 CVE-2026-20528: In ccci, there is a possible out of bounds write and read due to a missing bounds check. This could In ccci, there is a possible out of bounds write and read due to a missing bounds check. This could lead to local information disclosure, memory corruption, crashes, or privilege escalation if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS11428950 (Note: For MT6880, MT6890) / A

CVE-2026-20466 [MEDIUM] CWE-787 CVE-2026-20466: In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could l In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: AUTO00845351 (Note: For MT2737) / ALPS11072643 (Note: Fo

CVE-2026-20510 [MEDIUM] CWE-415 CVE-2026-20510: In camera middleware, there is a possible escalation of privilege due to double free. This could lea In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11134622; Issue ID: MSV-8894.

CVE-2026-20508 [MEDIUM] CWE-843 CVE-2026-20508: In Power HAL, there is a possible escalation of privilege due to type confusion. This could lead to In Power HAL, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11165543; Issue ID: MSV-9012.

CVE-2026-20509 [MEDIUM] CWE-121 CVE-2026-20509: In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11165543; Issue ID: MSV-9011.

CVE-2026-20463 [MEDIUM] CWE-280 CVE-2026-20463: In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead t In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: MOLY01716533; Issue ID: MSV-6309.

CVE-2026-20512 [MEDIUM] CWE-307 CVE-2026-20512: In Audio HAL, there is a possible escalation of privilege due to improper input validation. This cou In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087540; Issue ID: MSV-8246.

CVE-2026-20448 [MEDIUM] CWE-280 CVE-2026-20448: In geniezone, there is a possible escalation of privilege due to a missing permission check. This co In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10708513; Issue ID: MSV-6281.

CVE-2026-20536 [MEDIUM] CWE-416 CVE-2026-20536: In aidl, there is a possible memory corruption due to use after free. This could lead to local escal In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11242428; Issue ID: MSV-9038.

CVE-2026-20537 [MEDIUM] CWE-416 CVE-2026-20537: In aidl, there is a possible memory corruption due to use after free. This could lead to local escal In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11185225; Issue ID: MSV-9024.