mediatek mt8791t firmware vulnerabilities (CVE)

CVE records published for mediatek mt8791t firmware, newest first. Follow to get an email when a new one appears.

34 results
5.5Medium
CVE-2026-20543
MediaTek, Inc. MediaTek chipset

In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01645293; Issue ID: MSV-6761.

5.3Medium
CVE-2026-20541
MediaTek, Inc. MediaTek chipset

In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User int…

5.3Medium
CVE-2026-20540
MediaTek, Inc. MediaTek chipset

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interac…

5.3Medium
CVE-2026-20539
MediaTek, Inc. MediaTek chipset

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interac…

5.3Medium
CVE-2026-20538
MediaTek, Inc. MediaTek chipset

In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User int…

5.3Medium
CVE-2026-20534
MediaTek, Inc. MediaTek chipset

In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User inte…

6.7Medium
CVE-2026-20529
MediaTek, Inc. MediaTek chipset

In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS…

5.3Medium
CVE-2026-20527
MediaTek, Inc. MediaTek chipset

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction i…

7.5High
CVE-2026-20526
MediaTek, Inc. MediaTek chipset

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User …

7.5High
CVE-2026-20520
MediaTek, Inc. MediaTek chipset

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User …

7.5High
CVE-2026-20519
MediaTek, Inc. MediaTek chipset

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User …

5.3Medium
CVE-2026-20504
MediaTek, Inc. MediaTek chipset

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction i…

5.3Medium
CVE-2026-20503
MediaTek, Inc. MediaTek chipset

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction i…

6.0Medium
CVE-2026-20498
MediaTek, Inc. MediaTek chipset

In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patc…

4.4Medium
CVE-2026-20496
MediaTek, Inc. MediaTek chipset

In geniezone, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS…

4.4Medium
CVE-2026-20489
MediaTek, Inc. MediaTek chipset

In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS1…

4.4Medium
CVE-2026-20488
MediaTek, Inc. MediaTek chipset

In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: AL…

6.0Medium
CVE-2026-20481
MediaTek, Inc. MediaTek chipset

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: AL…

6.0Medium
CVE-2026-20497
MediaTek, Inc. MediaTek chipset

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: AL…

7.5High
CVE-2026-20479
MediaTek, Inc. MediaTek chipset

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interac…

6.0Medium
CVE-2026-20475
MediaTek, Inc. MediaTek chipset

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS…

6.0Medium
CVE-2026-20474
MediaTek, Inc. MediaTek chipset

In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11…

6.0Medium
CVE-2026-20473
MediaTek, Inc. MediaTek chipset

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019722; …

7.8High
CVE-2026-20455
MediaTek, Inc. MediaTek chipset

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: AL…

6.4Medium
CVE-2026-20454
MediaTek, Inc. MediaTek chipset

In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS1087…