mediatek mt6899 firmware vulnerabilities (CVE)

CVE records published for mediatek mt6899 firmware, newest first. Follow to get an email when a new one appears.

38 results
5.5Medium
CVE-2026-20543
MediaTek, Inc. MediaTek chipset

In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01645293; Issue ID: MSV-6761.

6.7Medium
CVE-2026-20542
MediaTek, Inc. MediaTek chipset

In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11076799; I…

5.3Medium
CVE-2026-20541
MediaTek, Inc. MediaTek chipset

In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User int…

5.3Medium
CVE-2026-20540
MediaTek, Inc. MediaTek chipset

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interac…

5.3Medium
CVE-2026-20539
MediaTek, Inc. MediaTek chipset

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interac…

5.3Medium
CVE-2026-20538
MediaTek, Inc. MediaTek chipset

In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User int…

6.7Medium
CVE-2026-20537
MediaTek, Inc. MediaTek chipset

In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11185225; Iss…

6.7Medium
CVE-2026-20536
MediaTek, Inc. MediaTek chipset

In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11242428; Iss…

6.7Medium
CVE-2026-20535
MediaTek, Inc. MediaTek chipset

In aidl, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID:…

5.3Medium
CVE-2026-20534
MediaTek, Inc. MediaTek chipset

In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User inte…

6.7Medium
CVE-2026-20533
MediaTek, Inc. MediaTek chipset

In display, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALP…

6.2Medium
CVE-2026-20532
MediaTek, Inc. MediaTek chipset

In apu, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249024; Issue ID: MSV-9168.

8.4High
CVE-2026-20531
MediaTek, Inc. MediaTek chipset

In apu, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249016; Issue ID: MSV-9169.

6.8Medium
CVE-2026-20544
MediaTek, Inc. MediaTek chipset

In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed …

5.3Medium
CVE-2026-20527
MediaTek, Inc. MediaTek chipset

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction i…

7.5High
CVE-2026-20526
MediaTek, Inc. MediaTek chipset

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User …

5.3Medium
CVE-2026-20525
MediaTek, Inc. MediaTek chipset

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interactio…

8.4High
CVE-2026-20524
MediaTek, Inc. MediaTek chipset

In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249004; Issue ID:…

8.4High
CVE-2026-20521
MediaTek, Inc. MediaTek chipset

In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; …

7.5High
CVE-2026-20520
MediaTek, Inc. MediaTek chipset

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User …

7.5High
CVE-2026-20519
MediaTek, Inc. MediaTek chipset

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User …

5.3Medium
CVE-2026-20503
MediaTek, Inc. MediaTek chipset

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction i…

8.4High
CVE-2026-20502
MediaTek, Inc. MediaTek chipset

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID:…

8.4High
CVE-2026-20501
MediaTek, Inc. MediaTek chipset

In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID:…

5.5Medium
CVE-2026-20500
MediaTek, Inc. MediaTek chipset

In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01810811; Issue ID: MSV-9232.