Mt6853 Firmware (Mediatek) - vulnerabilities (CVEs)
29 CVEs, 14 in the last 30 days, 1 known versions, newest CVE from 2026-10-05. Vendor: Mediatek.
CVEs of Mt6853 Firmware
- CVE-2026-20543 - CVSS 5.5 (medium), 2026-10-05: In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution…
- CVE-2026-20541 - CVSS 5.3 (medium), 2026-10-05: In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a…
- CVE-2026-20540 - CVSS 5.3 (medium), 2026-10-05: In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue…
- CVE-2026-20539 - CVSS 5.3 (medium), 2026-10-05: In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue…
- CVE-2026-20538 - CVSS 5.3 (medium), 2026-10-05: In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a…
- CVE-2026-20534 - CVSS 5.3 (medium), 2026-10-05: In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a…
- CVE-2026-20533 - CVSS 6.7 (medium), 2026-10-05: In display, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has…
- CVE-2026-20529 - CVSS 6.7 (medium), 2026-10-05: In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…
- CVE-2026-20544 - CVSS 6.8 (medium), 2026-10-05: In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical…
- CVE-2026-20527 - CVSS 5.3 (medium), 2026-10-05: In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base…
- CVE-2026-20526 - CVSS 7.5 (high), 2026-10-05: In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a…
- CVE-2026-20521 - CVSS 8.4 (high), 2026-10-05: In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional…
- CVE-2026-20520 - CVSS 7.5 (high), 2026-10-05: In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a…
- CVE-2026-20519 - CVSS 7.5 (high), 2026-10-05: In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a…
- CVE-2026-20504 - CVSS 5.3 (medium), 2026-09-07: In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base…
- CVE-2026-20503 - CVSS 5.3 (medium), 2026-09-07: In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base…
- CVE-2026-20502 - CVSS 8.4 (high), 2026-09-07: In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution…
- CVE-2026-20501 - CVSS 8.4 (high), 2026-09-07: In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution…
- CVE-2026-20484 - CVSS 4.4 (medium), 2026-08-03: In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has…
- CVE-2026-20483 - CVSS 7.7 (high), 2026-08-03: In Telephony, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no…
- CVE-2026-20479 - CVSS 7.5 (high), 2026-08-03: In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue…
- CVE-2026-20455 - CVSS 7.8 (high), 2026-06-01: In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…
- CVE-2026-20454 - CVSS 6.4 (medium), 2026-06-01: In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has…
- CVE-2026-20453 - CVSS 6.7 (medium), 2026-06-01: In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…
- CVE-2026-20450 - CVSS 6.5 (medium), 2026-05-04: In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base…
- CVE-2026-20449 - CVSS 6.5 (medium), 2026-05-04: In Modem, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base…
- CVE-2026-20433 - CVSS 8.8 (high), 2026-04-07: In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a…
- CVE-2026-20432 - CVSS 8 (high), 2026-04-07: In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a…
- CVE-2025-20659 - CVSS 6.5 (medium), 2025-04-07: In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue…