Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools

mt8755_firmware

Source -

NVD

CNA CVEs -

0

ADP CVEs -

0

CISA CVEs -

0

NVD CVEs -

5
Related CVEsRelated VendorsRelated AssignersReports
5Vulnerabilities found

CVE-2026-20450
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-6.5||MEDIUM
EPSS-0.29% / 21.22%
||
7 Day CHG~0.00%
Published-04 May, 2026 | 05:41
Updated-07 May, 2026 | 12:42
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01753620; Issue ID: MSV-6100.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt8668mt8771_firmwaremt6991_firmwaremt2737_firmwaremt6989_firmwaremt8791mt8798_firmwaremt8795t_firmwaremt6875_firmwaremt6891_firmwaremt6883mt6858mt6990_firmwaremt8798mt6853_firmwaremt8893_firmwaremt8771mt6833_firmwaremt6890_firmwaremt8793_firmwaremt6899mt6986_firmwaremt6879mt8755mt6983mt8775mt6890mt8863_firmwaremt6895_firmwaremt6833mt2735mt8668_firmwaremt6855mt2735_firmwaremt8675mt6877_firmwaremt6853mt6895mt6893mt6893_firmwaremt8792mt6885mt8793mt8883mt6877mt6879_firmwaremt8791t_firmwaremt6986mt6886mt8883_firmwaremt6875mt6897mt6891mt6990mt8755_firmwaremt8873_firmwaremt6896mt6980_firmwaremt8676mt6889_firmwaremt6883_firmwaremt6985_firmwaremt8676_firmwaremt6858_firmwaremt8775_firmwaremt8675_firmwaremt8863mt6873_firmwaremt8795tmt8673_firmwaremt6880_firmwaremt6873mt8673mt6878mt8792_firmwaremt6855_firmwaremt8893mt6899_firmwaremt6991mt8873mt6878_firmwaremt6897_firmwaremt8797_firmwaremt8678_firmwaremt6880mt6985mt6989mt6835mt6993_firmwaremt6885_firmwaremt6835_firmwaremt6886_firmwaremt6980mt6896_firmwaremt6889mt8791_firmwaremt2737mt6993mt8678mt8791tmt6983_firmwaremt8797MediaTek chipset
CWE ID-CWE-617
Reachable Assertion
CVE-2026-20449
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-6.5||MEDIUM
EPSS-0.22% / 13.13%
||
7 Day CHG~0.00%
Published-04 May, 2026 | 05:41
Updated-07 May, 2026 | 12:43
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01760138; Issue ID: MSV-6148.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt8668mt6779mt6991_firmwaremt2737_firmwaremt8791mt8798_firmwaremt6875_firmwaremt6771mt6990_firmwaremt6768_firmwaremt8771mt6815_firmwaremt8755mt6765mt6890mt8863_firmwaremt6986dmt6895_firmwaremt6833mt2735mt8668_firmwaremt8675mt6877_firmwaremt6767mt6988_firmwaremt6893mt6885mt8793mt8883mt6877mt8791t_firmwaremt6815mt6886mt8883_firmwaremt6875mt6897mt6990mt8873_firmwaremt6896mt6889_firmwaremt6767_firmwaremt6858_firmwaremt8775_firmwaremt6781mt6813mt8863mt6813_firmwaremt6769mt6873_firmwaremt8673_firmwaremt6880_firmwaremt8792_firmwaremt6855_firmwaremt6789_firmwaremt6899_firmwaremt6991mt6897_firmwaremt6880mt6739_firmwaremt6985mt6785_firmwaremt6783_firmwaremt6835mt6761mt6889mt8791_firmwaremt2737mt8797mt8771_firmwaremt6989_firmwaremt6761_firmwaremt6789mt8795t_firmwaremt6891_firmwaremt6883mt6858mt8798mt6853_firmwaremt8893_firmwaremt6833_firmwaremt6769_firmwaremt6890_firmwaremt8793_firmwaremt6899mt6988mt6879mt6983mt8775mt6855mt2735_firmwaremt6853mt6895mt6893_firmwaremt8792mt6879_firmwaremt6986d_firmwaremt6891mt6783mt8755_firmwaremt6765_firmwaremt6763mt6980_firmwaremt8676mt6768mt6883_firmwaremt6985_firmwaremt6762_firmwaremt8676_firmwaremt8675_firmwaremt6781_firmwaremt8795tmt6873mt8673mt6739mt6878mt6771_firmwaremt8893mt6763_firmwaremt6878_firmwaremt8797_firmwaremt8873mt8678_firmwaremt6762mt6989mt6993_firmwaremt6885_firmwaremt6835_firmwaremt6980mt6886_firmwaremt6896_firmwaremt6993mt8678mt8791tmt6785mt6779_firmwaremt6983_firmwareMediaTek chipset
CWE ID-CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CVE-2026-20433
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-8.8||HIGH
EPSS-0.34% / 26.61%
||
7 Day CHG~0.00%
Published-07 Apr, 2026 | 03:25
Updated-10 Apr, 2026 | 19:56
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01088681; Issue ID: MSV-4460.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt6885_firmwaremt6983mt2737_firmwaremt8675mt6890_firmwaremt6877ttmt6980d_firmwaremt6891_firmwaremt6833p_firmwaremt6833_firmwaremt8676mt8792_firmwaremt6878_firmwaremt6899_firmwaremt6893_firmwaremt6895_firmwaremt6873_firmwaremt6878m_firmwaremt6985_firmwaremt8893_firmwaremt8771mt6833mt6890mt8791mt6880_firmwaremt8673_firmwaremt6896_firmwaremt6990mt6833pmt6878mmt6886_firmwaremt6885mt8863_firmwaremt6983t_firmwaremt6835_firmwaremt8793_firmwaremt6991mt6835t_firmwaremt6877_firmwaremt8771_firmwaremt6853_firmwaremt8668_firmwaremt6893mt8893mt6853t_firmwaremt8797_firmwaremt8676_firmwaremt6879_firmwaremt8883_firmwaremt8791t_firmwaremt6853mt8792mt8873_firmwaremt2735mt8678mt8863mt6897_firmwaremt6855t_firmwaremt6980dmt6985mt8795t_firmwaremt6877mt8755_firmwaremt6879mt8673mt6895mt6991_firmwaremt8775mt6891mt8791tmt8791_firmwaremt6983tmt6896mt6889_firmwaremt6853tmt6897mt8798mt6877tt_firmwaremt6875t_firmwaremt6983_firmwaremt6889mt8795tmt6980mt6985t_firmwaremt6835mt6985tmt6875mt6989t_firmwaremt8775_firmwaremt6813mt6886mt8798_firmwaremt6877t_firmwaremt6878mt6873mt8793mt6877tmt6875tmt6989mt2737mt6883_firmwaremt6883mt6899mt6835tmt6990_firmwaremt6875_firmwaremt8883mt6980_firmwaremt8873mt8668mt6880mt6813_firmwaremt8678_firmwaremt6855_firmwaremt8675_firmwaremt2735_firmwaremt6895tt_firmwaremt8797mt6855tmt8755mt6855mt6989_firmwaremt6895ttmt6989tMediaTek chipset
CWE ID-CWE-787
Out-of-bounds Write
CVE-2026-20432
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-8||HIGH
EPSS-0.29% / 21.54%
||
7 Day CHG~0.00%
Published-07 Apr, 2026 | 03:25
Updated-24 Jul, 2026 | 22:10
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01406170; Issue ID: MSV-4461.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt8676mt6980mt6853_firmwaremt6889mt6886_firmwaremt6983_firmwaremt8797_firmwaremt8893_firmwaremt6896_firmwaremt8781mt8791tmt8791mt6877mt6880_firmwaremt6891_firmwaremt8668_firmwaremt2737_firmwaremt8792mt6899_firmwaremt6835mt6785mt6883_firmwaremt6897_firmwaremt8873mt6890mt6789mt8668mt6985_firmwaremt8781_firmwaremt2735_firmwaremt8771mt6891mt6980_firmwaremt6991mt6783_firmwaremt8771_firmwaremt6993_firmwaremt8675mt6886mt8883mt6815_firmwaremt8795tmt6985mt8775_firmwaremt6783mt6990_firmwaremt6878mt8893mt6789_firmwaremt6813mt6885mt6899mt8678_firmwaremt8678mt6893mt8798_firmwaremt6880mt6781mt2737mt8755_firmwaremt6785_firmwaremt6853mt6878_firmwaremt6781_firmwaremt6890_firmwaremt6873_firmwaremt8775mt6815mt6835_firmwaremt8793mt6993mt6833mt6875_firmwaremt6855mt8673mt8755mt6893_firmwaremt6779mt8863mt6813_firmwaremt8673_firmwaremt8793_firmwaremt8883_firmwaremt6897mt8795t_firmwaremt6875mt8863_firmwaremt6877_firmwaremt8675_firmwaremt8791t_firmwaremt6991_firmwaremt8791_firmwaremt8798mt6885_firmwaremt6896mt8792_firmwaremt8676_firmwaremt6989mt2735mt8797mt6855_firmwaremt6990mt6779_firmwaremt6879mt6989_firmwaremt6895_firmwaremt6873mt8873_firmwaremt6879_firmwaremt8789_firmwaremt6833_firmwaremt6895mt8789mt6983mt6883mt6889_firmwareMediaTek chipset
CWE ID-CWE-787
Out-of-bounds Write
CVE-2026-20431
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-6.5||MEDIUM
EPSS-0.31% / 23.11%
||
7 Day CHG~0.00%
Published-07 Apr, 2026 | 03:25
Updated-24 Jul, 2026 | 22:10
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01106496; Issue ID: MSV-4467.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt6878_firmwaremt8676mt8775mt6815mt8668_firmwaremt8792mt6835_firmwaremt6899_firmwaremt6993mt8793mt6835mt8755mt6897_firmwaremt8873mt8863mt6813_firmwaremt8668mt8793_firmwaremt6897mt6991mt8883_firmwaremt8863_firmwaremt6986mt6993_firmwaremt6991_firmwaremt8883mt8792_firmwaremt8676_firmwaremt6815_firmwaremt8775_firmwaremt6986_firmwaremt6878mt6813mt6899mt8678_firmwaremt8678mt8873_firmwaremt8755_firmwareMediaTek chipset
CWE ID-CWE-770
Allocation of Resources Without Limits or Throttling