Mt8391 Firmware (Mediatek) - vulnerabilities (CVEs)
12 CVEs, 8 in the last 30 days, 1 known versions, newest CVE from 2026-10-05. Vendor: Mediatek.
CVEs of Mt8391 Firmware
- CVE-2026-20542 - CVSS 6.7 (medium), 2026-10-05: In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already…
- CVE-2026-20544 - CVSS 6.8 (medium), 2026-10-05: In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical…
- CVE-2026-20588 - CVSS 6.7 (medium), 2026-10-05: In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…
- CVE-2026-20587 - CVSS 6.7 (medium), 2026-10-05: In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already…
- CVE-2026-20579 - CVSS 6.7 (medium), 2026-10-05: In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already…
- CVE-2026-20521 - CVSS 8.4 (high), 2026-10-05: In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional…
- CVE-2026-20589 - CVSS 6.7 (medium), 2026-10-05: In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already…
- CVE-2026-20586 - CVSS 8.8 (high), 2026-10-05: In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution…
- CVE-2026-20502 - CVSS 8.4 (high), 2026-09-07: In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution…
- CVE-2026-20501 - CVSS 8.4 (high), 2026-09-07: In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution…
- CVE-2026-20484 - CVSS 4.4 (medium), 2026-08-03: In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has…
- CVE-2026-20451 - CVSS 6.7 (medium), 2026-05-04: In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already…
