Mt8678 Firmware (Mediatek) - vulnerabilities (CVEs)

41 CVEs, 21 in the last 30 days, 1 known versions, newest CVE from 2026-10-05. Vendor: Mediatek.

CVEs of Mt8678 Firmware

CVE-2026-20543 - CVSS 5.5 (medium), 2026-10-05: In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution…
CVE-2026-20542 - CVSS 6.7 (medium), 2026-10-05: In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already…
CVE-2026-20541 - CVSS 5.3 (medium), 2026-10-05: In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a…
CVE-2026-20540 - CVSS 5.3 (medium), 2026-10-05: In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue…
CVE-2026-20539 - CVSS 5.3 (medium), 2026-10-05: In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue…
CVE-2026-20538 - CVSS 5.3 (medium), 2026-10-05: In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a…
CVE-2026-20534 - CVSS 5.3 (medium), 2026-10-05: In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a…
CVE-2026-20533 - CVSS 6.7 (medium), 2026-10-05: In display, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has…
CVE-2026-20530 - CVSS 6.7 (medium), 2026-10-05: In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…
CVE-2026-20544 - CVSS 6.8 (medium), 2026-10-05: In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical…
CVE-2026-20588 - CVSS 6.7 (medium), 2026-10-05: In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…
CVE-2026-20587 - CVSS 6.7 (medium), 2026-10-05: In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already…
CVE-2026-20579 - CVSS 6.7 (medium), 2026-10-05: In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already…
CVE-2026-20527 - CVSS 5.3 (medium), 2026-10-05: In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base…
CVE-2026-20526 - CVSS 7.5 (high), 2026-10-05: In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a…
CVE-2026-20525 - CVSS 5.3 (medium), 2026-10-05: In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue…
CVE-2026-20521 - CVSS 8.4 (high), 2026-10-05: In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional…
CVE-2026-20589 - CVSS 6.7 (medium), 2026-10-05: In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already…
CVE-2026-20586 - CVSS 8.8 (high), 2026-10-05: In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution…
CVE-2026-20520 - CVSS 7.5 (high), 2026-10-05: In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a…
CVE-2026-20519 - CVSS 7.5 (high), 2026-10-05: In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a…
CVE-2026-20503 - CVSS 5.3 (medium), 2026-09-07: In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base…
CVE-2026-20502 - CVSS 8.4 (high), 2026-09-07: In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution…
CVE-2026-20501 - CVSS 8.4 (high), 2026-09-07: In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution…
CVE-2026-20500 - CVSS 5.5 (medium), 2026-09-07: In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed.…
CVE-2026-20496 - CVSS 4.4 (medium), 2026-08-03: In geniezone, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has…
CVE-2026-20489 - CVSS 4.4 (medium), 2026-08-03: In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a malicious actor has…
CVE-2026-20488 - CVSS 4.4 (medium), 2026-08-03: In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has…
CVE-2026-20486 - CVSS 6.7 (medium), 2026-08-03: In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious actor has…
CVE-2026-20484 - CVSS 4.4 (medium), 2026-08-03: In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has…
CVE-2026-20477 - CVSS 6 (medium), 2026-08-03: In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…
CVE-2026-20475 - CVSS 6 (medium), 2026-08-03: In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…
CVE-2026-20474 - CVSS 6 (medium), 2026-08-03: In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has…
CVE-2026-20473 - CVSS 6 (medium), 2026-08-03: In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already…
CVE-2026-20449 - CVSS 6.5 (medium), 2026-05-04: In Modem, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base…
CVE-2026-20451 - CVSS 6.7 (medium), 2026-05-04: In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already…
CVE-2026-20450 - CVSS 6.5 (medium), 2026-05-04: In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base…
CVE-2026-20433 - CVSS 8.8 (high), 2026-04-07: In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a…
CVE-2026-20432 - CVSS 8 (high), 2026-04-07: In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a…
CVE-2026-20431 - CVSS 6.5 (medium), 2026-04-07: In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station…
CVE-2025-20659 - CVSS 6.5 (medium), 2025-04-07: In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue…