Mt8390 Firmware (Mediatek) - vulnerabilities (CVEs)

5 CVEs, 2 in the last 30 days, 1 known versions, newest CVE from 2026-10-05. Vendor: Mediatek.

CVEs of Mt8390 Firmware

• CVE-2026-20542 - CVSS 6.7 (medium), 2026-10-05: In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already…
• CVE-2026-20544 - CVSS 6.8 (medium), 2026-10-05: In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical…
• CVE-2026-20486 - CVSS 6.7 (medium), 2026-08-03: In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious actor has…
• CVE-2026-20484 - CVSS 4.4 (medium), 2026-08-03: In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has…
• CVE-2026-20451 - CVSS 6.7 (medium), 2026-05-04: In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already…