Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools

MT2718, MT6899, MT6991, MT8678, MT8793

Source -

CNA

CNA CVEs -

4

ADP CVEs -

0

CISA CVEs -

0

NVD CVEs -

0
Related CVEsRelated VendorsRelated AssignersReports
4Vulnerabilities found

CVE-2026-20441
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.02% / 4.60%
||
7 Day CHG~0.00%
Published-02 Mar, 2026 | 08:39
Updated-03 Mar, 2026 | 13:02
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10432500; Issue ID: MSV-5803.

Action-Not Available
Vendor-MediaTek Inc.Google LLC
Product-mt8793mt6899androidmt2718mt8678mt6991MT2718, MT6899, MT6991, MT8678, MT8793
CWE ID-CWE-787
Out-of-bounds Write
CVE-2026-20440
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.04% / 10.76%
||
7 Day CHG~0.00%
Published-02 Mar, 2026 | 08:39
Updated-03 Mar, 2026 | 13:03
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431968; Issue ID: MSV-5824.

Action-Not Available
Vendor-MediaTek Inc.Google LLC
Product-mt8793mt6899androidmt2718mt8678mt6991MT2718, MT6899, MT6991, MT8678, MT8793
CWE ID-CWE-1285
Improper Validation of Specified Index, Position, or Offset in Input
CWE ID-CWE-787
Out-of-bounds Write
CVE-2026-20439
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-4.4||MEDIUM
EPSS-0.02% / 4.56%
||
7 Day CHG~0.00%
Published-02 Mar, 2026 | 08:39
Updated-03 Mar, 2026 | 12:47
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In imgsys, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431955; Issue ID: MSV-5826.

Action-Not Available
Vendor-MediaTek Inc.Google LLC
Product-mt8793mt6899androidmt2718mt8678mt6991MT2718, MT6899, MT6991, MT8678, MT8793
CWE ID-CWE-416
Use After Free
CVE-2026-20437
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-4.4||MEDIUM
EPSS-0.02% / 4.56%
||
7 Day CHG~0.00%
Published-02 Mar, 2026 | 08:39
Updated-03 Mar, 2026 | 12:48
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In MAE, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431940; Issue ID: MSV-5843.

Action-Not Available
Vendor-MediaTek Inc.Google LLC
Product-mt8793mt6899androidmt2718mt8678mt6991MT2718, MT6899, MT6991, MT8678, MT8793
CWE ID-CWE-416
Use After Free