Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools

mt8863

Source -

NVD

CNA CVEs -

0

ADP CVEs -

0

CISA CVEs -

0

NVD CVEs -

29
Related CVEsRelated VendorsRelated AssignersReports
29Vulnerabilities found

CVE-2026-20450
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-6.5||MEDIUM
EPSS-0.29% / 21.22%
||
7 Day CHG~0.00%
Published-04 May, 2026 | 05:41
Updated-07 May, 2026 | 12:42
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01753620; Issue ID: MSV-6100.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt8668mt8771_firmwaremt6991_firmwaremt2737_firmwaremt6989_firmwaremt8791mt8798_firmwaremt8795t_firmwaremt6875_firmwaremt6891_firmwaremt6883mt6858mt6990_firmwaremt8798mt6853_firmwaremt8893_firmwaremt8771mt6833_firmwaremt6890_firmwaremt8793_firmwaremt6899mt6986_firmwaremt6879mt8755mt6983mt8775mt6890mt8863_firmwaremt6895_firmwaremt6833mt2735mt8668_firmwaremt6855mt2735_firmwaremt8675mt6877_firmwaremt6853mt6895mt6893mt6893_firmwaremt8792mt6885mt8793mt8883mt6877mt6879_firmwaremt8791t_firmwaremt6986mt6886mt8883_firmwaremt6875mt6897mt6891mt6990mt8755_firmwaremt8873_firmwaremt6896mt6980_firmwaremt8676mt6889_firmwaremt6883_firmwaremt6985_firmwaremt8676_firmwaremt6858_firmwaremt8775_firmwaremt8675_firmwaremt8863mt6873_firmwaremt8795tmt8673_firmwaremt6880_firmwaremt6873mt8673mt6878mt8792_firmwaremt6855_firmwaremt8893mt6899_firmwaremt6991mt8873mt6878_firmwaremt6897_firmwaremt8797_firmwaremt8678_firmwaremt6880mt6985mt6989mt6835mt6993_firmwaremt6885_firmwaremt6835_firmwaremt6886_firmwaremt6980mt6896_firmwaremt6889mt8791_firmwaremt2737mt6993mt8678mt8791tmt6983_firmwaremt8797MediaTek chipset
CWE ID-CWE-617
Reachable Assertion
CVE-2026-20449
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-6.5||MEDIUM
EPSS-0.22% / 13.13%
||
7 Day CHG~0.00%
Published-04 May, 2026 | 05:41
Updated-07 May, 2026 | 12:43
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01760138; Issue ID: MSV-6148.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt8668mt6779mt6991_firmwaremt2737_firmwaremt8791mt8798_firmwaremt6875_firmwaremt6771mt6990_firmwaremt6768_firmwaremt8771mt6815_firmwaremt8755mt6765mt6890mt8863_firmwaremt6986dmt6895_firmwaremt6833mt2735mt8668_firmwaremt8675mt6877_firmwaremt6767mt6988_firmwaremt6893mt6885mt8793mt8883mt6877mt8791t_firmwaremt6815mt6886mt8883_firmwaremt6875mt6897mt6990mt8873_firmwaremt6896mt6889_firmwaremt6767_firmwaremt6858_firmwaremt8775_firmwaremt6781mt6813mt8863mt6813_firmwaremt6769mt6873_firmwaremt8673_firmwaremt6880_firmwaremt8792_firmwaremt6855_firmwaremt6789_firmwaremt6899_firmwaremt6991mt6897_firmwaremt6880mt6739_firmwaremt6985mt6785_firmwaremt6783_firmwaremt6835mt6761mt6889mt8791_firmwaremt2737mt8797mt8771_firmwaremt6989_firmwaremt6761_firmwaremt6789mt8795t_firmwaremt6891_firmwaremt6883mt6858mt8798mt6853_firmwaremt8893_firmwaremt6833_firmwaremt6769_firmwaremt6890_firmwaremt8793_firmwaremt6899mt6988mt6879mt6983mt8775mt6855mt2735_firmwaremt6853mt6895mt6893_firmwaremt8792mt6879_firmwaremt6986d_firmwaremt6891mt6783mt8755_firmwaremt6765_firmwaremt6763mt6980_firmwaremt8676mt6768mt6883_firmwaremt6985_firmwaremt6762_firmwaremt8676_firmwaremt8675_firmwaremt6781_firmwaremt8795tmt6873mt8673mt6739mt6878mt6771_firmwaremt8893mt6763_firmwaremt6878_firmwaremt8797_firmwaremt8873mt8678_firmwaremt6762mt6989mt6993_firmwaremt6885_firmwaremt6835_firmwaremt6980mt6886_firmwaremt6896_firmwaremt6993mt8678mt8791tmt6785mt6779_firmwaremt6983_firmwareMediaTek chipset
CWE ID-CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CVE-2026-20433
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-8.8||HIGH
EPSS-0.34% / 26.61%
||
7 Day CHG~0.00%
Published-07 Apr, 2026 | 03:25
Updated-10 Apr, 2026 | 19:56
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01088681; Issue ID: MSV-4460.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt6885_firmwaremt6983mt2737_firmwaremt8675mt6890_firmwaremt6877ttmt6980d_firmwaremt6891_firmwaremt6833p_firmwaremt6833_firmwaremt8676mt8792_firmwaremt6878_firmwaremt6899_firmwaremt6893_firmwaremt6895_firmwaremt6873_firmwaremt6878m_firmwaremt6985_firmwaremt8893_firmwaremt8771mt6833mt6890mt8791mt6880_firmwaremt8673_firmwaremt6896_firmwaremt6990mt6833pmt6878mmt6886_firmwaremt6885mt8863_firmwaremt6983t_firmwaremt6835_firmwaremt8793_firmwaremt6991mt6835t_firmwaremt6877_firmwaremt8771_firmwaremt6853_firmwaremt8668_firmwaremt6893mt8893mt6853t_firmwaremt8797_firmwaremt8676_firmwaremt6879_firmwaremt8883_firmwaremt8791t_firmwaremt6853mt8792mt8873_firmwaremt2735mt8678mt8863mt6897_firmwaremt6855t_firmwaremt6980dmt6985mt8795t_firmwaremt6877mt8755_firmwaremt6879mt8673mt6895mt6991_firmwaremt8775mt6891mt8791tmt8791_firmwaremt6983tmt6896mt6889_firmwaremt6853tmt6897mt8798mt6877tt_firmwaremt6875t_firmwaremt6983_firmwaremt6889mt8795tmt6980mt6985t_firmwaremt6835mt6985tmt6875mt6989t_firmwaremt8775_firmwaremt6813mt6886mt8798_firmwaremt6877t_firmwaremt6878mt6873mt8793mt6877tmt6875tmt6989mt2737mt6883_firmwaremt6883mt6899mt6835tmt6990_firmwaremt6875_firmwaremt8883mt6980_firmwaremt8873mt8668mt6880mt6813_firmwaremt8678_firmwaremt6855_firmwaremt8675_firmwaremt2735_firmwaremt6895tt_firmwaremt8797mt6855tmt8755mt6855mt6989_firmwaremt6895ttmt6989tMediaTek chipset
CWE ID-CWE-787
Out-of-bounds Write
CVE-2026-20432
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-8||HIGH
EPSS-0.29% / 21.54%
||
7 Day CHG~0.00%
Published-07 Apr, 2026 | 03:25
Updated-24 Jul, 2026 | 22:10
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01406170; Issue ID: MSV-4461.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt8676mt6980mt6853_firmwaremt6889mt6886_firmwaremt6983_firmwaremt8797_firmwaremt8893_firmwaremt6896_firmwaremt8781mt8791tmt8791mt6877mt6880_firmwaremt6891_firmwaremt8668_firmwaremt2737_firmwaremt8792mt6899_firmwaremt6835mt6785mt6883_firmwaremt6897_firmwaremt8873mt6890mt6789mt8668mt6985_firmwaremt8781_firmwaremt2735_firmwaremt8771mt6891mt6980_firmwaremt6991mt6783_firmwaremt8771_firmwaremt6993_firmwaremt8675mt6886mt8883mt6815_firmwaremt8795tmt6985mt8775_firmwaremt6783mt6990_firmwaremt6878mt8893mt6789_firmwaremt6813mt6885mt6899mt8678_firmwaremt8678mt6893mt8798_firmwaremt6880mt6781mt2737mt8755_firmwaremt6785_firmwaremt6853mt6878_firmwaremt6781_firmwaremt6890_firmwaremt6873_firmwaremt8775mt6815mt6835_firmwaremt8793mt6993mt6833mt6875_firmwaremt6855mt8673mt8755mt6893_firmwaremt6779mt8863mt6813_firmwaremt8673_firmwaremt8793_firmwaremt8883_firmwaremt6897mt8795t_firmwaremt6875mt8863_firmwaremt6877_firmwaremt8675_firmwaremt8791t_firmwaremt6991_firmwaremt8791_firmwaremt8798mt6885_firmwaremt6896mt8792_firmwaremt8676_firmwaremt6989mt2735mt8797mt6855_firmwaremt6990mt6779_firmwaremt6879mt6989_firmwaremt6895_firmwaremt6873mt8873_firmwaremt6879_firmwaremt8789_firmwaremt6833_firmwaremt6895mt8789mt6983mt6883mt6889_firmwareMediaTek chipset
CWE ID-CWE-787
Out-of-bounds Write
CVE-2026-20431
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-6.5||MEDIUM
EPSS-0.31% / 23.11%
||
7 Day CHG~0.00%
Published-07 Apr, 2026 | 03:25
Updated-24 Jul, 2026 | 22:10
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01106496; Issue ID: MSV-4467.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt6878_firmwaremt8676mt8775mt6815mt8668_firmwaremt8792mt6835_firmwaremt6899_firmwaremt6993mt8793mt6835mt8755mt6897_firmwaremt8873mt8863mt6813_firmwaremt8668mt8793_firmwaremt6897mt6991mt8883_firmwaremt8863_firmwaremt6986mt6993_firmwaremt6991_firmwaremt8883mt8792_firmwaremt8676_firmwaremt6815_firmwaremt8775_firmwaremt6986_firmwaremt6878mt6813mt6899mt8678_firmwaremt8678mt8873_firmwaremt8755_firmwareMediaTek chipset
CWE ID-CWE-770
Allocation of Resources Without Limits or Throttling
CVE-2026-20434
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-7.5||HIGH
EPSS-0.22% / 12.42%
||
7 Day CHG~0.00%
Published-02 Mar, 2026 | 08:39
Updated-30 Mar, 2026 | 13:05
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY00782946; Issue ID: MSV-4135.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt6739mt6893mt6980mt6878mt6853mt6897mt8668mt6879mt8673mt6855mt8766rmt6769smt6762mt6761mt6768mt6765tmt8666mt8768mt8766mt8755mt8798mt6985mt6769zmt6781mt6783mt8793mt8771mt6833plr12anr17mt6855tmt8797mt6767mt6885mt6771mt8678mt6877ttmt8676mt6990mt8765mt6896mt6883mt6785mt8791tmt6779mt6763mt8791mt2735mt6853tmt6762mmt6785umt6835tmt6875mt8863mt6889mt8789mt6765mt6878mmt8795tmt6891mt8883mt6985tmt6789mt6877tmt6886mt6983mt6899mt6877mt6769mt6769tmt6833mt8667mt6835mt2737mt6991mt6989tmt8873mt8675mt8893mt6873mt6785tmt6983tmt6895ttmt6895lr13mt6890mt8781mt6875tmt8786mt6762dmt6980dmt6769knr15mt6989mt6880mt8788mt8788enr16mt8792MediaTek chipset
CWE ID-CWE-787
Out-of-bounds Write
CVE-2026-20406
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-6.5||MEDIUM
EPSS-0.21% / 11.71%
||
7 Day CHG~0.00%
Published-02 Feb, 2026 | 08:14
Updated-30 Mar, 2026 | 13:02
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01726634; Issue ID: MSV-5728.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt8673mt8893mt8755nr16mt6879mt6989mt8791tmt6813mt6883nr17mt6897mt6986mt8793mt6855mt6985mt2735mt8873mt6890mt6893mt8668mt8863mt6980nr17rmt6853mt6889mt8795tmt8798mt8791mt6990mt8678mt6833mt6873mt6878mt6880mt8797nr15mt6895mt6896mt8771mt8792mt6858mt6983mt6877mt6886mt6891mt6993mt6899mt8675mt6875mt8676mt6815mt6885mt6991mt8883mt2737mt6835MediaTek chipset
CWE ID-CWE-770
Allocation of Resources Without Limits or Throttling
CWE ID-CWE-754
Improper Check for Unusual or Exceptional Conditions
CVE-2026-20405
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-6.5||MEDIUM
EPSS-0.22% / 12.06%
||
7 Day CHG~0.00%
Published-02 Feb, 2026 | 08:14
Updated-30 Mar, 2026 | 13:02
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01688495; Issue ID: MSV-4818.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt8673mt8893mt8755nr16mt6879mt6989mt8791tmt6813mt6883nr17mt6897mt6986mt8793mt6855mt6985mt2735mt8873mt6890mt6893mt8668mt8863mt6980nr17rmt6853mt6889mt8795tmt8798mt8791mt6990mt8678mt6833mt6873mt6878mt6880mt8797nr15mt6895mt6896mt8771mt8792mt6858mt6983mt6877mt6886mt6891mt6993mt6899mt8675mt6875mt8676mt6815mt6885mt6991mt8883mt2737mt6835MediaTek chipset
CWE ID-CWE-617
Reachable Assertion
CVE-2026-20404
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-6.5||MEDIUM
EPSS-0.46% / 37.18%
||
7 Day CHG~0.00%
Published-02 Feb, 2026 | 08:14
Updated-30 Mar, 2026 | 13:02
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01689248; Issue ID: MSV-4837.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt8673mt8893mt8755nr16mt6879mt6989mt8791tmt6813mt6883nr17mt6897mt6986mt8793mt6855mt6985mt2735mt8873mt6890mt6893mt8668mt8863mt6980nr17rmt6853mt6889mt8795tmt8798mt8791mt6990mt8678mt6833mt6873mt6878mt6880mt8797nr15mt6895mt6896mt8771mt8792mt6858mt6983mt6877mt6886mt6891mt6993mt6899mt8675mt6875mt8676mt6815mt6885mt6991mt8883mt2737mt6835MediaTek chipset
CWE ID-CWE-787
Out-of-bounds Write
CVE-2026-20422
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-6.5||MEDIUM
EPSS-0.22% / 12.06%
||
7 Day CHG~0.00%
Published-02 Feb, 2026 | 08:14
Updated-30 Mar, 2026 | 13:02
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00827332; Issue ID: MSV-5919.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt8673mt8893mt8755nr16mt6879mt6989mt8791tmt6813mt6883nr17mt6897mt6986mt8793mt6855mt6985mt2735mt8873mt6890mt6893mt8668mt8863mt6980nr17rmt6853mt6889mt8795tmt8798mt8791mt6990mt8678mt6833mt6873mt6878mt6880mt8775mt8797nr15mt6895mt6896mt8771mt8792mt6858mt6983mt6877mt6886mt6891mt6993mt6899mt8675mt6875mt8676mt6815mt6885mt6991mt8883mt2737mt6835MediaTek chipset
CWE ID-CWE-617
Reachable Assertion
CVE-2025-20760
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-6.5||MEDIUM
EPSS-0.26% / 17.26%
||
7 Day CHG~0.00%
Published-06 Jan, 2026 | 01:46
Updated-30 Mar, 2026 | 13:04
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible read of uninitialized heap data due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01676750; Issue ID: MSV-4653.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt8673mt8893mt8755nr16mt6879mt6989mt8791tmt6883mt6897nr17mt6986mt8793mt6855mt6985mt2735mt8873mt6890mt6893mt8863mt6980mt6853mt8795tmt8798mt8791mt6990mt8678mt6833mt6873mt6878mt6880mt8797nr15mt6895mt6896mt8771mt8792mt6983mt6877mt6886mt6891mt6993mt6899mt8675mt6875mt8676mt6889mt6885mt6991mt8883mt2737mt6835MediaTek chipset
CWE ID-CWE-617
Reachable Assertion
CVE-2025-20761
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-6.5||MEDIUM
EPSS-0.23% / 14.31%
||
7 Day CHG~0.00%
Published-06 Jan, 2026 | 01:46
Updated-30 Mar, 2026 | 13:04
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01311265; Issue ID: MSV-4655.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt8673mt8893mt8755nr16mt6879mt6989mt6853tmt8791tmt6883mt6897nr17mt8793mt6855mt6833pmt6985mt2735mt8873mt6890mt6893mt6877tmt8863mt6980mt6875tmt6853mt8795tmt2737mt6835tmt8798mt8791mt6990mt8678mt6833mt6873mt6880mt6983tmt8797mt6985tnr15mt6895mt6896mt8771mt8792mt6983mt6877mt6886mt6895ttmt6891mt8675mt6980dmt6875mt6855tmt8676mt6989tmt6889mt6885mt8883mt6877ttmt6835MediaTek chipset
CWE ID-CWE-754
Improper Check for Unusual or Exceptional Conditions
CVE-2025-20762
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-6.5||MEDIUM
EPSS-0.26% / 17.26%
||
7 Day CHG~0.00%
Published-06 Jan, 2026 | 01:46
Updated-30 Mar, 2026 | 13:03
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01685181; Issue ID: MSV-4760.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt8755mt6897nr17mt8793mt8792mt8873mt6878mmt8863mt6899mt6835tmt8676mt6991mt8883mt6878mt8678mt6835MediaTek chipset
CWE ID-CWE-617
Reachable Assertion
CVE-2025-20793
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-6.5||MEDIUM
EPSS-0.25% / 16.87%
||
7 Day CHG~0.00%
Published-06 Jan, 2026 | 01:46
Updated-30 Mar, 2026 | 13:03
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01430930; Issue ID: MSV-4836.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt8673mt8893mt8755nr16mt6879mt6989mt8791tmt6813mt6883nr17mt6897mt8793mt6855mt6985mt2735mt8873mt6890mt6893mt8863mt6980nr17rmt6853mt6889mt8795tmt8798mt8791mt6990mt8678mt6833mt6873mt6878mt6880mt8797nr15mt6895mt6896mt8771mt8792mt6983mt6877mt6886mt6891mt6993mt6899mt8675mt6875mt8676mt6815mt6885mt6991mt8883mt2737mt6835MediaTek chipset
CWE ID-CWE-476
NULL Pointer Dereference
CVE-2025-20794
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-6.5||MEDIUM
EPSS-0.25% / 16.12%
||
7 Day CHG~0.00%
Published-06 Jan, 2026 | 01:46
Updated-30 Mar, 2026 | 13:03
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01689259 / MOLY01586470; Issue ID: MSV-4847.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt8673mt8893mt8755nr16mt6879mt6989mt8791tmt6813mt6883nr17mt6897mt6986mt8793mt6855mt6985mt2735mt8873mt6890mt6893mt8863mt6980nr17rmt6853mt6889mt8795tmt8798mt8791mt6990mt8678mt6833mt6873mt6878mt6880mt8797nr15mt6895mt6896mt8771mt8792mt6983mt6877mt6886mt6891mt6993mt6899mt8675mt6875mt8676mt6815mt6885mt6991mt8883mt2737mt6835MediaTek chipset
CWE ID-CWE-121
Stack-based Buffer Overflow
CVE-2025-20756
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-6.5||MEDIUM
EPSS-0.22% / 12.16%
||
7 Day CHG-0.01%
Published-02 Dec, 2025 | 02:34
Updated-17 Feb, 2026 | 15:16
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01673749; Issue ID: MSV-4643.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt8673mt8893mt8755mt6853tmt8791tmt6883mt8793mt6855mt6833pmt2735mt8873mt6890mt6893mt6877tmt8863mt6875tmt6853mt8795tmt8798mt8791mt8678mt6833mt6873mt6880mt8797nr15mt8771mt8792mt6877mt6891mt8675mt6875mt6855tmt8676mt6889mt6885mt8883mt6877ttMT2735, MT6833, MT6833P, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT8673, MT8675, MT8676, MT8678, MT8755, MT8771, MT8791, MT8791T, MT8792, MT8793, MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893
CWE ID-CWE-1287
Improper Validation of Specified Type of Input
CVE-2025-20758
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-4.9||MEDIUM
EPSS-0.45% / 36.68%
||
7 Day CHG+0.01%
Published-02 Dec, 2025 | 02:34
Updated-03 Dec, 2025 | 21:37
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01673755; Issue ID: MSV-4647.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt6985tmt6875tmt6890mt8792mt8873mt6833mt8771mt6983mt6875mt6895mt2737mt6835tmt6877ttmt6889mt8678mt6883mt6990mt6983tmt6886mt6895ttmt6833pmt6835mt6885mt6893mt6853tmt6878mt6980dmt6985mt6879mt6853mt6878mmt6873nr17rmt6989mt6891mt8798mt8793nr16nr17mt6877tmt8791mt6896mt6897mt8673mt6855tmt8755mt6813mt8863mt2735mt6991mt8795tnr15mt8676mt6855mt6877mt6980mt8675mt6899mt6989tmt8893mt8791tmt8883mt8797mt6880MT2735, MT2737, MT6813, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8673, MT8675, MT8676, MT8678, MT8755, MT8771, MT8791, MT8791T, MT8792, MT8793, MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893
CWE ID-CWE-248
Uncaught Exception
CVE-2025-20754
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-5.3||MEDIUM
EPSS-0.44% / 35.75%
||
7 Day CHG+0.01%
Published-02 Dec, 2025 | 02:34
Updated-04 Dec, 2025 | 13:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible system crash due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01689251; Issue ID: MSV-4840.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt6985tmt6875tmt6890mt8792mt8873mt6833mt8771mt6983mt6875mt6895mt2737mt6835tmt6877ttmt6889mt8678mt6883mt6990mt6983tmt6886mt6895ttmt6833pmt6835mt6885mt6893mt6853tmt6878mt6980dmt6985mt6879mt6853mt6878mmt6873nr17rmt6989mt6891mt8798mt8793nr16nr17mt6877tmt8791mt6896mt6897mt8673mt6855tmt8755mt6813mt8863mt2735mt6991mt8795tnr15mt8676mt6855mt6877mt6980mt8675mt6899mt6989tmt8893mt8791tmt8883mt8797mt6880MT2735, MT2737, MT6813, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8673, MT8675, MT8676, MT8678, MT8755, MT8771, MT8791, MT8791T, MT8792, MT8793, MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893
CWE ID-CWE-248
Uncaught Exception
CVE-2025-20726
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-7.5||HIGH
EPSS-0.47% / 37.88%
||
7 Day CHG~0.00%
Published-04 Nov, 2025 | 06:19
Updated-26 Feb, 2026 | 17:47
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01672598; Issue ID: MSV-4622.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt8675mt8678mt6855mt6983mt2737mt8795tmt8793mt6835mt6895mt6875mt6980mt6877tmt6769nr15mt6895ttmt6899mt6813mt6875tmt6769tmt6833mt8676mt8765mt8883mt8786mt6877ttmt6880mt8766mt6853mt6990mt6991mt6873mt8791mt6878mt6893mt6835tmt6989tmt8667mt6891mt6762mt6769kmt8893mt6985tmt6769zmt8792mt8771mt8788emt6767mt6886mt6983tmt6877mt8798mt6765nr16mt6762mmt6878mmt6853tmt6897mt6989mt6985mt8788mt8673mt6762dmt6769smt6980dmt8766rmt2735mt6739mt6879mt8797mt6833pmt8873mt6855tmt6896mt6761mt6889mt8666mt8863lr12anr17rmt6768nr17mt6771mt6765tmt8768mt6883mt6890mt6763mt8791tmt6885MT2735, MT2737, MT6739, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6771, MT6813, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8667, MT8673, MT8675, MT8676, MT8678, MT8765, MT8766, MT8766R, MT8768, MT8771, MT8786, MT8788, MT8788E, MT8791, MT8791T, MT8792, MT8793, MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893
CWE ID-CWE-122
Heap-based Buffer Overflow
CWE ID-CWE-787
Out-of-bounds Write
CVE-2025-20727
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-8.1||HIGH
EPSS-0.51% / 40.67%
||
7 Day CHG~0.00%
Published-04 Nov, 2025 | 06:19
Updated-26 Feb, 2026 | 17:47
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01672601; Issue ID: MSV-4623.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt6889mt6765mt6899mt8678mt6769mt6877tmt8883mt6835tmt8788mt8791tmt6833pmt6769zmt8795tmt8786mt6835mt8788emt6855mt6990mt6883mt6765tmt8798mt8765mt2735mt8893mt6769kmt8793mt6877mt6762dmt6833mt6878mmt6896mt6989nr15mt8675mt6989tmt8797mt6853lr12amt6980dmt6768mt6767mt6890mt6873mt6761mt6885nr17mt8673mt8676mt6763mt6895mt6875mt6983tmt6880mt8863mt6897mt6853tmt6769tmt6769smt8873mt6762mmt6983mt8766rnr16mt8768mt8766mt6771mt8791mt8667mt2737mt6980mt6985tmt6893mt6891mt6762mt8771nr17rmt6991mt6813mt6878mt8666mt6877ttmt6985mt6739mt6855tmt6886mt6879mt6895ttmt6875tmt8792MT2735, MT2737, MT6739, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6771, MT6813, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8667, MT8673, MT8675, MT8676, MT8678, MT8765, MT8766, MT8766R, MT8768, MT8771, MT8786, MT8788, MT8788E, MT8791, MT8791T, MT8792, MT8793, MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893
CWE ID-CWE-787
Out-of-bounds Write
CVE-2025-20704
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-8||HIGH
EPSS-0.29% / 20.62%
||
7 Day CHG~0.00%
Published-01 Sep, 2025 | 05:12
Updated-26 Feb, 2026 | 17:49
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01516959; Issue ID: MSV-3502.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt6813mt6897nr17mt8792mt8873mt6878mmt8863nr17rmt6899mt6835tmt8676mt6991mt8883mt6878mt8678mt6835MT6813, MT6835, MT6835T, MT6878, MT6878M, MT6897, MT6899, MT6991, MT8676, MT8678, MT8792, MT8863, MT8873, MT8883
CWE ID-CWE-787
Out-of-bounds Write
CVE-2025-20703
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-6.5||MEDIUM
EPSS-0.28% / 20.48%
||
7 Day CHG~0.00%
Published-01 Sep, 2025 | 05:12
Updated-17 Feb, 2026 | 15:16
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01599794; Issue ID: MSV-3708.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt8673mt8893nr16mt6879mt6989mt6853tmt8791tmt6813mt6883nr17mt6897mt6855mt6833pmt6985mt2735mt8873mt6890mt6878mmt6877tmt6893mt6980mt8863mt6875tnr17rmt6853mt8795tmt8798mt6835tmt8791mt6990mt8678mt6833mt6873mt6878mt6880mt6983tmt8797mt6985tnr15mt6895mt6896mt8771mt8792mt6983mt6877mt6886mt6895ttmt6891mt8675mt6899mt6980dmt6875mt6855tmt8676mt6989tmt6877ttmt6889mt6885mt6991mt8883mt2737mt6835MT2735, MT2737, MT6813, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8673, MT8675, MT8676, MT8678, MT8771, MT8791, MT8791T, MT8792, MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893
CWE ID-CWE-125
Out-of-bounds Read
CVE-2025-20708
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-8.8||HIGH
EPSS-0.32% / 24.35%
||
7 Day CHG~0.00%
Published-01 Sep, 2025 | 05:12
Updated-26 Feb, 2026 | 17:49
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01123853; Issue ID: MSV-4131.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt8673mt8893nr16mt6879mt6989mt6853tmt8791tmt6813mt6883nr17mt6897mt6855mt6833pmt6985mt2735mt8873mt6890mt6878mmt6877tmt6893mt6980mt8863mt6875tnr17rmt6853mt6889mt8795tmt8798mt6835tmt8791mt6990mt8678mt6833mt6873mt6878mt6880mt6983tmt8797mt6985tnr15mt6895mt6896mt8771mt8792mt6983mt6877mt6886mt6895ttmt6891mt8675mt6899mt6980dmt6875mt6855tmt8676mt6989tmt6877ttmt6815mt6885mt6991mt8883mt2737mt6835MT2735, MT2737, MT6813, MT6815, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8673, MT8675, MT8676, MT8678, MT8771, MT8791, MT8791T, MT8792, MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893
CWE ID-CWE-787
Out-of-bounds Write
CVE-2025-20678
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-6.5||MEDIUM
EPSS-0.33% / 24.79%
||
7 Day CHG~0.00%
Published-02 Jun, 2025 | 02:29
Updated-17 Feb, 2026 | 15:16
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In ims service, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01394606; Issue ID: MSV-2739.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt8893mt8788mt6879mt6989mt6853tmt8791tmt6813mt6883nr17lr13mt6833pmt6762mt6769tmt8873mt8786mt6890mt6893mt6878mmt6877tmt6771mt6980mt6875tmt8768nr17rmt6769zmt8798mt6835tmt8791mt6990mt6833mt6873mt6983tmt6785nr15lr12amt8766rmt8771mt8765mt6767mt6783mt6895ttmt6891mt6779mt6875mt6769kmt6855tmt8676mt6765tmt6885mt6991mt6835mt8666mt6739mt8673nr16mt6897mt6855mt6789mt6985mt6781mt8863mt6768mt6853mt6762dmt8795tmt6889mt8667mt8788emt6878mt6880mt8797mt6985tmt6895mt6896mt8766mt8781mt6762mmt6983mt6769mt6877mt6886mt8789mt6765mt6761mt8675mt6899mt6785tmt6769smt6989tmt6763mt6877ttmt6785umt8883mt8678MT6739, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6771, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6785U, MT6789, MT6813, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8667, MT8673, MT8675, MT8676, MT8678, MT8765, MT8766, MT8766R, MT8768, MT8771, MT8781, MT8786, MT8788, MT8788E, MT8789, MT8791, MT8791T, MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893
CWE ID-CWE-674
Uncontrolled Recursion
CVE-2025-20659
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-6.5||MEDIUM
EPSS-0.34% / 26.51%
||
7 Day CHG~0.00%
Published-07 Apr, 2025 | 03:14
Updated-17 Feb, 2026 | 15:16
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01519028; Issue ID: MSV-2768.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt6833_firmwaremt6989mt6762d_firmwaremt6853tmt6813mt6883mt6897_firmwaremt6983_firmwaremt6762mt6769tmt8786mt6878_firmwaremt6761_firmwaremt6893mt8768mt6895_firmwaremt8798mt6771_firmwaremt6835tmt8786_firmwaremt6983tmt6785mt8675_firmwaremt6989t_firmwaremt6895ttmt6765_firmwaremt2737_firmwaremt6779mt6980dmt6875mt6985t_firmwaremt6833p_firmwaremt6875t_firmwaremt6785_firmwaremt6877_firmwaremt6880_firmwaremt2737mt8666mt6883_firmwaremt6785t_firmwaremt6885_firmwaremt6897mt6855mt6783_firmwaremt6789mt2735mt8673_firmwaremt6853t_firmwaremt8863mt6853mt6762dmt6769s_firmwaremt6895tt_firmwaremt8768_firmwaremt6873_firmwaremt6769z_firmwaremt6879_firmwaremt6769t_firmwaremt6855_firmwaremt6878mt6768_firmwaremt6835t_firmwaremt6989_firmwaremt6895mt8766mt8781mt6762mmt6886_firmwaremt8771_firmwaremt6769mt6877mt6886mt6761mt6899mt6763_firmwaremt8766_firmwaremt6875_firmwaremt8863_firmwaremt6769smt6990_firmwaremt6991_firmwaremt6877ttmt6785umt6835_firmwaremt8678mt8788e_firmwaremt6767_firmwaremt8788mt6879mt8791tmt8796mt6833pmt8796_firmwaremt6890mt6878mmt6877tmt6771mt6779_firmwaremt6980mt2735_firmwaremt6769zmt6875tmt6781_firmwaremt8798_firmwaremt6990mt6765t_firmwaremt6833mt6769k_firmwaremt6873mt6853_firmwaremt6896_firmwaremt6877t_firmwaremt8678_firmwaremt8765_firmwaremt8771mt8765mt6767mt6783mt6813_firmwaremt8666_firmwaremt6891mt6985_firmwaremt6878m_firmwaremt6983t_firmwaremt8788_firmwaremt6769kmt6855tmt8676mt6765tmt6739_firmwaremt6885mt6991mt6877tt_firmwaremt6835mt6739mt8673mt6985mt6980_firmwaremt6889_firmwaremt8667_firmwaremt6762m_firmwaremt6781mt6768mt6789_firmwaremt8791t_firmwaremt6762_firmwaremt8667mt8788emt6880mt8797mt6769_firmwaremt6899_firmwaremt6985tmt8676_firmwaremt6896mt6980d_firmwaremt6983mt6765mt6855t_firmwaremt8675mt6785tmt8781_firmwaremt6891_firmwaremt8797_firmwaremt6890_firmwaremt6989tmt6763mt6889mt6893_firmwaremt6785u_firmwareMT2735, MT2737, MT6739, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6771, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6785U, MT6789, MT6813, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8667, MT8673, MT8675, MT8676, MT8678, MT8765, MT8766, MT8768, MT8771, MT8781, MT8786, MT8788, MT8788E, MT8791T, MT8796, MT8797, MT8798, MT8863
CWE ID-CWE-125
Out-of-bounds Read
CVE-2025-20634
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-8.8||HIGH
EPSS-0.73% / 50.49%
||
7 Day CHG~0.00%
Published-03 Feb, 2025 | 03:23
Updated-17 Feb, 2026 | 15:16
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01289384; Issue ID: MSV-2436.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt8673nr16mt6879mt6989mt6813mt6897nr17mt6985mt6878mmt8863mt6980nr17rmt8795tmt8798mt6835tmt6990mt8678mt6878mt6983tmt6985tmt6895mt6896mt6983mt6886mt6895ttmt6899mt6980dmt8676mt6989tmt6991mt2737mt6835MT2737, MT6813, MT6835, MT6835T, MT6878, MT6878M, MT6879, MT6886, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8673, MT8676, MT8678, MT8795T, MT8798, MT8863
CWE ID-CWE-787
Out-of-bounds Write
CVE-2024-20151
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.17% / 6.23%
||
7 Day CHG~0.00%
Published-06 Jan, 2025 | 03:17
Updated-21 Apr, 2025 | 17:13
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: MOLY01399339; Issue ID: MSV-1928.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt6895mt6835mt6855mt6878tmt6985mt2739mt6897mt6813mt6895tnr17mt6989mt6886mt6879mt6983mt6986mt8798mt6789mt6990mt6986dmt8676mt2737mt8863mt6896mt6899nr16mt6815mt6991mt6835tmt8678mt6878mt6980mt6980dmt6988MT2737, MT2739, MT6789, MT6813, MT6815, MT6835, MT6835T, MT6855, MT6878, MT6878T, MT6879, MT6886, MT6895, MT6895T, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6985, MT6986, MT6986D, MT6988, MT6989, MT6990, MT6991, MT8676, MT8678, MT8798, MT8863
CWE ID-CWE-787
Out-of-bounds Write
CVE-2024-20150
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-7.5||HIGH
EPSS-0.76% / 51.35%
||
7 Day CHG~0.00%
Published-06 Jan, 2025 | 03:17
Updated-22 Apr, 2025 | 13:50
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01412526; Issue ID: MSV-2018.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt6769mt6989mt6877tmt6855lr13mt6990mt6873mt6880tmt6983tmt6895ttlr12amt8788emt8676mt8797mt6833pmt8666mt6785tmt6789mt6985mt6980dmt6785umt8863mt8675mt6899nr15nr17mt6853tmt6785mt6877mt6769zmt8765mt8786mt6991mt6893mt6783mt6980mt6891mt8673mt8788mt8791tmt6877ttmt6883mt6767mt6769smt2737mt8771mt6985tmt6885mt6875tmt6875mt6889mt6768mt6880umt6769tmt8789mt6886mt8678mt6897mt8768mt6835tmt6878mt6880mt2735mt6989tmt8766mt8798mt6878mmt6855tmt6781mt8795tmt6779nr16mt6835mt6890mt6896mt6853mt6769kmt6895mt8781mt6879MT2735, MT2737, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6785U, MT6789, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6880T, MT6880U, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8673, MT8675, MT8676, MT8678, MT8765, MT8766, MT8768, MT8771, MT8781, MT8786, MT8788, MT8788E, MT8789, MT8791T, MT8795T, MT8797, MT8798, MT8863
CWE ID-CWE-502
Deserialization of Untrusted Data
CVE-2024-20149
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-7.5||HIGH
EPSS-0.72% / 50.18%
||
7 Day CHG~0.00%
Published-06 Jan, 2025 | 03:17
Updated-12 Jan, 2026 | 16:23
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01231341 / MOLY01263331 / MOLY01233835; Issue ID: MSV-2165.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt6833pmt6886mt6873mt6877tmt8797mt8795tmt6879mt6989mt8789mt6893mt6769tmt6985mt6985tmt6899mt8678mt6855tmt6877mt6895ttmt8768mt6875mt6890mt6880tmt6768mt8798mt6896mt6878mnr17.r2mt6855mt8766mt6989tmt6889mt6990mt6769kmt6883mt6980dmt6880umt6783mt6769zmt6980mt6779mt8786mt6781mt6769smt6835tmt2735mt6877ttmt8863mt6983tmt6991mt6895mt6897mt6785tmt6835nr17.r1mt6785umt6769nr15mt8675mt6875tmt6853tmt8788emt6878mt6789mt8676mt6891mt8788lr13mt8771mt6785mt6853lr12mt6767mt8765mt8791tmt6885mt6880mt8673mt8666nr16mt2737mt8781MT2735, MT2737, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6785U, MT6789, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6880T, MT6880U, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8673, MT8675, MT8676, MT8678, MT8765, MT8766, MT8768, MT8771, MT8781, MT8786, MT8788, MT8788E, MT8789, MT8791T, MT8795T, MT8797, MT8798, MT8863
CWE ID-CWE-1284
Improper Validation of Specified Quantity in Input