https://vulnogram.org/ Most recent CVEs assigned by MediaTek, Inc. (mediatek). https://vulnogram.org/seaview/icons/mediatek.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-20543 https://vulnogram.org/CVE-2026-20543 In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01645293; Issue… Medium Mon, 05 Oct 2026 01:40:24 GMT https://vulnogram.org/CVE-2026-20542 https://vulnogram.org/CVE-2026-20542 In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11… Medium Mon, 05 Oct 2026 01:40:23 GMT https://vulnogram.org/CVE-2026-20541 https://vulnogram.org/CVE-2026-20541 In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed.… Medium Mon, 05 Oct 2026 01:40:21 GMT https://vulnogram.org/CVE-2026-20540 https://vulnogram.org/CVE-2026-20540 In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. Use… Medium Mon, 05 Oct 2026 01:40:20 GMT https://vulnogram.org/CVE-2026-20539 https://vulnogram.org/CVE-2026-20539 In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. Use… Medium Mon, 05 Oct 2026 01:40:19 GMT https://vulnogram.org/CVE-2026-20538 https://vulnogram.org/CVE-2026-20538 In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed.… Medium Mon, 05 Oct 2026 01:40:17 GMT https://vulnogram.org/CVE-2026-20537 https://vulnogram.org/CVE-2026-20537 In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS1118… Medium Mon, 05 Oct 2026 01:40:16 GMT https://vulnogram.org/CVE-2026-20536 https://vulnogram.org/CVE-2026-20536 In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS1124… Medium Mon, 05 Oct 2026 01:40:15 GMT https://vulnogram.org/CVE-2026-20535 https://vulnogram.org/CVE-2026-20535 In aidl, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.… Medium Mon, 05 Oct 2026 01:40:13 GMT https://vulnogram.org/CVE-2026-20534 https://vulnogram.org/CVE-2026-20534 In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed.… Medium Mon, 05 Oct 2026 01:40:12 GMT https://vulnogram.org/CVE-2026-20533 https://vulnogram.org/CVE-2026-20533 In display, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patc… Medium Mon, 05 Oct 2026 01:40:10 GMT https://vulnogram.org/CVE-2026-20532 https://vulnogram.org/CVE-2026-20532 In apu, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249024; Issue ID: MSV-9168. Medium Mon, 05 Oct 2026 01:40:09 GMT https://vulnogram.org/CVE-2026-20531 https://vulnogram.org/CVE-2026-20531 In apu, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249016; Issue ID: M… High Mon, 05 Oct 2026 01:40:08 GMT https://vulnogram.org/CVE-2026-20530 https://vulnogram.org/CVE-2026-20530 In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch… Medium Mon, 05 Oct 2026 01:40:06 GMT https://vulnogram.org/CVE-2026-20529 https://vulnogram.org/CVE-2026-20529 In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch… Medium Mon, 05 Oct 2026 01:40:05 GMT https://vulnogram.org/CVE-2026-20528 https://vulnogram.org/CVE-2026-20528 In ccci, there is a possible out of bounds write and read due to a missing bounds check. This could lead to local information disclosure, memory corruption, crashes, or privilege escalation if a malicious actor has already obtained the System privile… Medium Mon, 05 Oct 2026 01:40:04 GMT https://vulnogram.org/CVE-2026-20544 https://vulnogram.org/CVE-2026-20544 In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is no… Medium Mon, 05 Oct 2026 01:40:02 GMT https://vulnogram.org/CVE-2026-20588 https://vulnogram.org/CVE-2026-20588 In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patc… Medium Mon, 05 Oct 2026 01:40:01 GMT https://vulnogram.org/CVE-2026-20587 https://vulnogram.org/CVE-2026-20587 In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: AL… Medium Mon, 05 Oct 2026 01:39:59 GMT https://vulnogram.org/CVE-2026-20579 https://vulnogram.org/CVE-2026-20579 In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11… Medium Mon, 05 Oct 2026 01:39:58 GMT https://vulnogram.org/CVE-2026-20527 https://vulnogram.org/CVE-2026-20527 In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User inte… Medium Mon, 05 Oct 2026 01:39:57 GMT https://vulnogram.org/CVE-2026-20526 https://vulnogram.org/CVE-2026-20526 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges need… High Mon, 05 Oct 2026 01:39:55 GMT https://vulnogram.org/CVE-2026-20525 https://vulnogram.org/CVE-2026-20525 In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User i… Medium Mon, 05 Oct 2026 01:39:54 GMT https://vulnogram.org/CVE-2026-20524 https://vulnogram.org/CVE-2026-20524 In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249004;… High Mon, 05 Oct 2026 01:39:52 GMT https://vulnogram.org/CVE-2026-20523 https://vulnogram.org/CVE-2026-20523 In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS1124… High Mon, 05 Oct 2026 01:39:51 GMT https://vulnogram.org/CVE-2026-20522 https://vulnogram.org/CVE-2026-20522 In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS1124… High Mon, 05 Oct 2026 01:39:50 GMT https://vulnogram.org/CVE-2026-20521 https://vulnogram.org/CVE-2026-20521 In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS1… High Mon, 05 Oct 2026 01:39:48 GMT https://vulnogram.org/CVE-2026-20589 https://vulnogram.org/CVE-2026-20589 In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11… Medium Mon, 05 Oct 2026 01:39:47 GMT https://vulnogram.org/CVE-2026-20586 https://vulnogram.org/CVE-2026-20586 In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Iss… High Network Exploitable Mon, 05 Oct 2026 01:39:45 GMT https://vulnogram.org/CVE-2026-20520 https://vulnogram.org/CVE-2026-20520 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges need… High Mon, 05 Oct 2026 01:39:44 GMT https://vulnogram.org/CVE-2026-20519 https://vulnogram.org/CVE-2026-20519 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges need… High Mon, 05 Oct 2026 01:39:43 GMT https://vulnogram.org/CVE-2026-20518 https://vulnogram.org/CVE-2026-20518 In geniezone, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch… Medium Mon, 07 Sep 2026 01:57:36 GMT https://vulnogram.org/CVE-2026-20517 https://vulnogram.org/CVE-2026-20517 In geniezone, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch I… Medium Mon, 07 Sep 2026 01:57:34 GMT https://vulnogram.org/CVE-2026-20515 https://vulnogram.org/CVE-2026-20515 In gpu, there is a possible system crash due to use after free. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11122991; Issue ID: MSV-8132. Medium Mon, 07 Sep 2026 01:57:33 GMT https://vulnogram.org/CVE-2026-20514 https://vulnogram.org/CVE-2026-20514 In Audio HAL, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitatio… Medium Mon, 07 Sep 2026 01:57:32 GMT https://vulnogram.org/CVE-2026-20513 https://vulnogram.org/CVE-2026-20513 In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation… Medium Mon, 07 Sep 2026 01:57:30 GMT https://vulnogram.org/CVE-2026-20512 https://vulnogram.org/CVE-2026-20512 In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitati… Medium Mon, 07 Sep 2026 01:57:29 GMT https://vulnogram.org/CVE-2026-20511 https://vulnogram.org/CVE-2026-20511 In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID… Medium Mon, 07 Sep 2026 01:57:28 GMT https://vulnogram.org/CVE-2026-20510 https://vulnogram.org/CVE-2026-20510 In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Pa… Medium Mon, 07 Sep 2026 01:57:26 GMT https://vulnogram.org/CVE-2026-20509 https://vulnogram.org/CVE-2026-20509 In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Pat… Medium Mon, 07 Sep 2026 01:57:25 GMT https://vulnogram.org/CVE-2026-20508 https://vulnogram.org/CVE-2026-20508 In Power HAL, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch I… Medium Mon, 07 Sep 2026 01:57:24 GMT https://vulnogram.org/CVE-2026-20507 https://vulnogram.org/CVE-2026-20507 In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch I… Medium Mon, 07 Sep 2026 01:57:22 GMT https://vulnogram.org/CVE-2026-20506 https://vulnogram.org/CVE-2026-20506 In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch I… Medium Mon, 07 Sep 2026 01:57:21 GMT https://vulnogram.org/CVE-2026-20516 https://vulnogram.org/CVE-2026-20516 In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11060069 / DTV0… Medium Mon, 07 Sep 2026 01:57:20 GMT https://vulnogram.org/CVE-2026-20504 https://vulnogram.org/CVE-2026-20504 In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User inte… Medium Mon, 07 Sep 2026 01:57:18 GMT https://vulnogram.org/CVE-2026-20503 https://vulnogram.org/CVE-2026-20503 In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User inte… Medium Mon, 07 Sep 2026 01:57:17 GMT https://vulnogram.org/CVE-2026-20502 https://vulnogram.org/CVE-2026-20502 In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030;… High Mon, 07 Sep 2026 01:57:16 GMT https://vulnogram.org/CVE-2026-20501 https://vulnogram.org/CVE-2026-20501 In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030;… High Mon, 07 Sep 2026 01:57:15 GMT https://vulnogram.org/CVE-2026-20500 https://vulnogram.org/CVE-2026-20500 In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01810811; Issue ID: MSV-9232. Medium Mon, 07 Sep 2026 01:57:13 GMT https://vulnogram.org/CVE-2026-20498 https://vulnogram.org/CVE-2026-20498 In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitat… Medium Mon, 03 Aug 2026 02:06:06 GMT