Mt6767 (Mediatek Inc.) - vulnerabilities (CVEs)
20 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-11-04. Vendor: Mediatek Inc..
CVEs of Mt6767
- CVE-2025-20727 - CVSS 8.1 (high), 2025-11-04: In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege, if a UE has connected to a…
- CVE-2025-20726 - CVSS 7.5 (high), 2025-11-04: In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected…
- CVE-2025-20725 - CVSS 7.5 (high), 2025-11-04: In ims service, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has…
- CVE-2025-20678 - CVSS 6.5 (medium), 2025-06-02: In ims service, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a…
- CVE-2025-20667 - CVSS 7.5 (high), 2025-05-05: In Modem, there is a possible information disclosure due to incorrect error handling. This could lead to remote information disclosure, if a UE has connected…
- CVE-2025-20659 - CVSS 6.5 (medium), 2025-04-07: In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue…
- CVE-2025-20647 - CVSS 6.5 (medium), 2025-03-03: In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base…
- CVE-2024-20154 - CVSS 8.8 (high), 2025-01-06: In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution, if a UE has connected to a rogue…
- CVE-2024-20150 - CVSS 7.5 (high), 2025-01-06: In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service with no additional execution privileges needed.…
- CVE-2024-20149 - CVSS 7.5 (high), 2025-01-06: In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution…
- CVE-2024-20077 - CVSS 7.5 (high), 2024-07-01: In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service with no additional execution…
- CVE-2024-20076 - CVSS 7.5 (high), 2024-07-01: In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service with no additional execution…
- CVE-2024-20039 - CVSS 8.8 (high), 2024-04-01: In modem protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional…
- CVE-2023-32890 - CVSS 7.5 (high), 2024-01-02: In modem EMM, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution…
- CVE-2023-32840 - CVSS 8.4 (high), 2023-11-06: In modem CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
- CVE-2023-20819 - CVSS 9.8 (critical), 2023-10-02: In CDMA PPP protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no…
- CVE-2023-20726 - CVSS 3.3 (low), 2023-05-15: In mnld, there is a possible leak of GPS location due to a missing permission check. This could lead to local information disclosure with no additional…
- CVE-2022-26446 - CVSS 7.5 (high), 2022-11-08: In Modem 4G RRC, there is a possible system crash due to improper input validation. This could lead to remote denial of service, when concatenating improper…
- CVE-2022-21744 - CVSS 9.8 (critical), 2022-07-06: In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding GPRS Packet…
- CVE-2022-20083 - CVSS 9.8 (critical), 2022-07-06: In Modem 2G/3G CC, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding combined…
