Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools

mt6813_firmware

Source -

NVD

CNA CVEs -

0

ADP CVEs -

0

CISA CVEs -

0

NVD CVEs -

6
Related CVEsRelated VendorsRelated AssignersReports
6Vulnerabilities found

CVE-2026-20449
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-6.5||MEDIUM
EPSS-0.22% / 13.13%
||
7 Day CHG~0.00%
Published-04 May, 2026 | 05:41
Updated-07 May, 2026 | 12:43
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01760138; Issue ID: MSV-6148.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt8668mt6779mt6991_firmwaremt2737_firmwaremt8791mt8798_firmwaremt6875_firmwaremt6771mt6990_firmwaremt6768_firmwaremt8771mt6815_firmwaremt8755mt6765mt6890mt8863_firmwaremt6986dmt6895_firmwaremt6833mt2735mt8668_firmwaremt8675mt6877_firmwaremt6767mt6988_firmwaremt6893mt6885mt8793mt8883mt6877mt8791t_firmwaremt6815mt6886mt8883_firmwaremt6875mt6897mt6990mt8873_firmwaremt6896mt6889_firmwaremt6767_firmwaremt6858_firmwaremt8775_firmwaremt6781mt6813mt8863mt6813_firmwaremt6769mt6873_firmwaremt8673_firmwaremt6880_firmwaremt8792_firmwaremt6855_firmwaremt6789_firmwaremt6899_firmwaremt6991mt6897_firmwaremt6880mt6739_firmwaremt6985mt6785_firmwaremt6783_firmwaremt6835mt6761mt6889mt8791_firmwaremt2737mt8797mt8771_firmwaremt6989_firmwaremt6761_firmwaremt6789mt8795t_firmwaremt6891_firmwaremt6883mt6858mt8798mt6853_firmwaremt8893_firmwaremt6833_firmwaremt6769_firmwaremt6890_firmwaremt8793_firmwaremt6899mt6988mt6879mt6983mt8775mt6855mt2735_firmwaremt6853mt6895mt6893_firmwaremt8792mt6879_firmwaremt6986d_firmwaremt6891mt6783mt8755_firmwaremt6765_firmwaremt6763mt6980_firmwaremt8676mt6768mt6883_firmwaremt6985_firmwaremt6762_firmwaremt8676_firmwaremt8675_firmwaremt6781_firmwaremt8795tmt6873mt8673mt6739mt6878mt6771_firmwaremt8893mt6763_firmwaremt6878_firmwaremt8797_firmwaremt8873mt8678_firmwaremt6762mt6989mt6993_firmwaremt6885_firmwaremt6835_firmwaremt6980mt6886_firmwaremt6896_firmwaremt6993mt8678mt8791tmt6785mt6779_firmwaremt6983_firmwareMediaTek chipset
CWE ID-CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CVE-2026-20446
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-4.3||MEDIUM
EPSS-0.19% / 9.04%
||
7 Day CHG~0.00%
Published-07 Apr, 2026 | 03:25
Updated-07 Apr, 2026 | 15:43
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In sec boot, there is a possible out of bounds write due to an integer overflow. This could lead to local denial of service, if an attacker has physical access to the device, with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09963054; Issue ID: MSV-3899.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt6813_firmwaremt6813MediaTek chipset
CWE ID-CWE-190
Integer Overflow or Wraparound
CWE ID-CWE-787
Out-of-bounds Write
CVE-2026-20433
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-8.8||HIGH
EPSS-0.34% / 26.61%
||
7 Day CHG~0.00%
Published-07 Apr, 2026 | 03:25
Updated-10 Apr, 2026 | 19:56
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01088681; Issue ID: MSV-4460.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt6885_firmwaremt6983mt2737_firmwaremt8675mt6890_firmwaremt6877ttmt6980d_firmwaremt6891_firmwaremt6833p_firmwaremt6833_firmwaremt8676mt8792_firmwaremt6878_firmwaremt6899_firmwaremt6893_firmwaremt6895_firmwaremt6873_firmwaremt6878m_firmwaremt6985_firmwaremt8893_firmwaremt8771mt6833mt6890mt8791mt6880_firmwaremt8673_firmwaremt6896_firmwaremt6990mt6833pmt6878mmt6886_firmwaremt6885mt8863_firmwaremt6983t_firmwaremt6835_firmwaremt8793_firmwaremt6991mt6835t_firmwaremt6877_firmwaremt8771_firmwaremt6853_firmwaremt8668_firmwaremt6893mt8893mt6853t_firmwaremt8797_firmwaremt8676_firmwaremt6879_firmwaremt8883_firmwaremt8791t_firmwaremt6853mt8792mt8873_firmwaremt2735mt8678mt8863mt6897_firmwaremt6855t_firmwaremt6980dmt6985mt8795t_firmwaremt6877mt8755_firmwaremt6879mt8673mt6895mt6991_firmwaremt8775mt6891mt8791tmt8791_firmwaremt6983tmt6896mt6889_firmwaremt6853tmt6897mt8798mt6877tt_firmwaremt6875t_firmwaremt6983_firmwaremt6889mt8795tmt6980mt6985t_firmwaremt6835mt6985tmt6875mt6989t_firmwaremt8775_firmwaremt6813mt6886mt8798_firmwaremt6877t_firmwaremt6878mt6873mt8793mt6877tmt6875tmt6989mt2737mt6883_firmwaremt6883mt6899mt6835tmt6990_firmwaremt6875_firmwaremt8883mt6980_firmwaremt8873mt8668mt6880mt6813_firmwaremt8678_firmwaremt6855_firmwaremt8675_firmwaremt2735_firmwaremt6895tt_firmwaremt8797mt6855tmt8755mt6855mt6989_firmwaremt6895ttmt6989tMediaTek chipset
CWE ID-CWE-787
Out-of-bounds Write
CVE-2026-20432
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-8||HIGH
EPSS-0.29% / 21.54%
||
7 Day CHG~0.00%
Published-07 Apr, 2026 | 03:25
Updated-24 Jul, 2026 | 22:10
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01406170; Issue ID: MSV-4461.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt8676mt6980mt6853_firmwaremt6889mt6886_firmwaremt6983_firmwaremt8797_firmwaremt8893_firmwaremt6896_firmwaremt8781mt8791tmt8791mt6877mt6880_firmwaremt6891_firmwaremt8668_firmwaremt2737_firmwaremt8792mt6899_firmwaremt6835mt6785mt6883_firmwaremt6897_firmwaremt8873mt6890mt6789mt8668mt6985_firmwaremt8781_firmwaremt2735_firmwaremt8771mt6891mt6980_firmwaremt6991mt6783_firmwaremt8771_firmwaremt6993_firmwaremt8675mt6886mt8883mt6815_firmwaremt8795tmt6985mt8775_firmwaremt6783mt6990_firmwaremt6878mt8893mt6789_firmwaremt6813mt6885mt6899mt8678_firmwaremt8678mt6893mt8798_firmwaremt6880mt6781mt2737mt8755_firmwaremt6785_firmwaremt6853mt6878_firmwaremt6781_firmwaremt6890_firmwaremt6873_firmwaremt8775mt6815mt6835_firmwaremt8793mt6993mt6833mt6875_firmwaremt6855mt8673mt8755mt6893_firmwaremt6779mt8863mt6813_firmwaremt8673_firmwaremt8793_firmwaremt8883_firmwaremt6897mt8795t_firmwaremt6875mt8863_firmwaremt6877_firmwaremt8675_firmwaremt8791t_firmwaremt6991_firmwaremt8791_firmwaremt8798mt6885_firmwaremt6896mt8792_firmwaremt8676_firmwaremt6989mt2735mt8797mt6855_firmwaremt6990mt6779_firmwaremt6879mt6989_firmwaremt6895_firmwaremt6873mt8873_firmwaremt6879_firmwaremt8789_firmwaremt6833_firmwaremt6895mt8789mt6983mt6883mt6889_firmwareMediaTek chipset
CWE ID-CWE-787
Out-of-bounds Write
CVE-2026-20431
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-6.5||MEDIUM
EPSS-0.31% / 23.11%
||
7 Day CHG~0.00%
Published-07 Apr, 2026 | 03:25
Updated-24 Jul, 2026 | 22:10
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01106496; Issue ID: MSV-4467.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt6878_firmwaremt8676mt8775mt6815mt8668_firmwaremt8792mt6835_firmwaremt6899_firmwaremt6993mt8793mt6835mt8755mt6897_firmwaremt8873mt8863mt6813_firmwaremt8668mt8793_firmwaremt6897mt6991mt8883_firmwaremt8863_firmwaremt6986mt6993_firmwaremt6991_firmwaremt8883mt8792_firmwaremt8676_firmwaremt6815_firmwaremt8775_firmwaremt6986_firmwaremt6878mt6813mt6899mt8678_firmwaremt8678mt8873_firmwaremt8755_firmwareMediaTek chipset
CWE ID-CWE-770
Allocation of Resources Without Limits or Throttling
CVE-2025-20659
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-6.5||MEDIUM
EPSS-0.34% / 26.51%
||
7 Day CHG~0.00%
Published-07 Apr, 2025 | 03:14
Updated-17 Feb, 2026 | 15:16
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01519028; Issue ID: MSV-2768.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt6833_firmwaremt6989mt6762d_firmwaremt6853tmt6813mt6883mt6897_firmwaremt6983_firmwaremt6762mt6769tmt8786mt6878_firmwaremt6761_firmwaremt6893mt8768mt6895_firmwaremt8798mt6771_firmwaremt6835tmt8786_firmwaremt6983tmt6785mt8675_firmwaremt6989t_firmwaremt6895ttmt6765_firmwaremt2737_firmwaremt6779mt6980dmt6875mt6985t_firmwaremt6833p_firmwaremt6875t_firmwaremt6785_firmwaremt6877_firmwaremt6880_firmwaremt2737mt8666mt6883_firmwaremt6785t_firmwaremt6885_firmwaremt6897mt6855mt6783_firmwaremt6789mt2735mt8673_firmwaremt6853t_firmwaremt8863mt6853mt6762dmt6769s_firmwaremt6895tt_firmwaremt8768_firmwaremt6873_firmwaremt6769z_firmwaremt6879_firmwaremt6769t_firmwaremt6855_firmwaremt6878mt6768_firmwaremt6835t_firmwaremt6989_firmwaremt6895mt8766mt8781mt6762mmt6886_firmwaremt8771_firmwaremt6769mt6877mt6886mt6761mt6899mt6763_firmwaremt8766_firmwaremt6875_firmwaremt8863_firmwaremt6769smt6990_firmwaremt6991_firmwaremt6877ttmt6785umt6835_firmwaremt8678mt8788e_firmwaremt6767_firmwaremt8788mt6879mt8791tmt8796mt6833pmt8796_firmwaremt6890mt6878mmt6877tmt6771mt6779_firmwaremt6980mt2735_firmwaremt6769zmt6875tmt6781_firmwaremt8798_firmwaremt6990mt6765t_firmwaremt6833mt6769k_firmwaremt6873mt6853_firmwaremt6896_firmwaremt6877t_firmwaremt8678_firmwaremt8765_firmwaremt8771mt8765mt6767mt6783mt6813_firmwaremt8666_firmwaremt6891mt6985_firmwaremt6878m_firmwaremt6983t_firmwaremt8788_firmwaremt6769kmt6855tmt8676mt6765tmt6739_firmwaremt6885mt6991mt6877tt_firmwaremt6835mt6739mt8673mt6985mt6980_firmwaremt6889_firmwaremt8667_firmwaremt6762m_firmwaremt6781mt6768mt6789_firmwaremt8791t_firmwaremt6762_firmwaremt8667mt8788emt6880mt8797mt6769_firmwaremt6899_firmwaremt6985tmt8676_firmwaremt6896mt6980d_firmwaremt6983mt6765mt6855t_firmwaremt8675mt6785tmt8781_firmwaremt6891_firmwaremt8797_firmwaremt6890_firmwaremt6989tmt6763mt6889mt6893_firmwaremt6785u_firmwareMT2735, MT2737, MT6739, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6771, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6785U, MT6789, MT6813, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8667, MT8673, MT8675, MT8676, MT8678, MT8765, MT8766, MT8768, MT8771, MT8781, MT8786, MT8788, MT8788E, MT8791T, MT8796, MT8797, MT8798, MT8863
CWE ID-CWE-125
Out-of-bounds Read