Mt8786 Firmware (Mediatek) - vulnerabilities (CVEs)

20 CVEs, 7 in the last 30 days, 1 known versions, newest CVE from 2026-10-05. Vendor: Mediatek.

CVEs of Mt8786 Firmware

CVE-2026-20543 - CVSS 5.5 (medium), 2026-10-05: In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution…
CVE-2026-20541 - CVSS 5.3 (medium), 2026-10-05: In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a…
CVE-2026-20540 - CVSS 5.3 (medium), 2026-10-05: In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue…
CVE-2026-20539 - CVSS 5.3 (medium), 2026-10-05: In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue…
CVE-2026-20538 - CVSS 5.3 (medium), 2026-10-05: In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a…
CVE-2026-20534 - CVSS 5.3 (medium), 2026-10-05: In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a…
CVE-2026-20544 - CVSS 6.8 (medium), 2026-10-05: In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical…
CVE-2026-20496 - CVSS 4.4 (medium), 2026-08-03: In geniezone, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has…
CVE-2026-20489 - CVSS 4.4 (medium), 2026-08-03: In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a malicious actor has…
CVE-2026-20488 - CVSS 4.4 (medium), 2026-08-03: In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has…
CVE-2026-20475 - CVSS 6 (medium), 2026-08-03: In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…
CVE-2026-20474 - CVSS 6 (medium), 2026-08-03: In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has…
CVE-2026-20473 - CVSS 6 (medium), 2026-08-03: In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already…
CVE-2026-20455 - CVSS 7.8 (high), 2026-06-01: In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…
CVE-2026-20454 - CVSS 6.4 (medium), 2026-06-01: In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has…
CVE-2026-20453 - CVSS 6.7 (medium), 2026-06-01: In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…
CVE-2026-20448 - CVSS 6.7 (medium), 2026-05-04: In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious…
CVE-2026-20451 - CVSS 6.7 (medium), 2026-05-04: In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already…
CVE-2026-20447 - CVSS 6.7 (medium), 2026-05-04: In geniezone, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor…
CVE-2025-20659 - CVSS 6.5 (medium), 2025-04-07: In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue…