Mt6875 (Mediatek Inc.) - vulnerabilities (CVEs)

251 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-12-02. Vendor: Mediatek Inc..

CVEs of Mt6875

CVE-2025-20791 - CVSS 6.5 (medium), 2025-12-02: In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base…
CVE-2025-20792 - CVSS 5.3 (medium), 2025-12-02: In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue…
CVE-2025-20790 - CVSS 5.3 (medium), 2025-12-02: In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue…
CVE-2025-20758 - CVSS 4.9 (medium), 2025-12-02: In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base…
CVE-2025-20757 - CVSS 6.5 (medium), 2025-12-02: In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue…
CVE-2025-20759 - CVSS 6.5 (medium), 2025-12-02: In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue…
CVE-2025-20755 - CVSS 5.3 (medium), 2025-12-02: In Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a…
CVE-2025-20751 - CVSS 6.5 (medium), 2025-12-02: In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base…
CVE-2025-20754 - CVSS 5.3 (medium), 2025-12-02: In Modem, there is a possible system crash due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue…
CVE-2025-20750 - CVSS 6.5 (medium), 2025-12-02: In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue…
CVE-2025-20753 - CVSS 5.3 (medium), 2025-12-02: In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base…
CVE-2025-20756 - CVSS 6.5 (medium), 2025-12-02: In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station…
CVE-2025-20752 - CVSS 6.5 (medium), 2025-12-02: In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base…
CVE-2025-20726 - CVSS 7.5 (high), 2025-11-04: In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected…
CVE-2025-20727 - CVSS 8.1 (high), 2025-11-04: In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege, if a UE has connected to a…
CVE-2025-20725 - CVSS 7.5 (high), 2025-11-04: In ims service, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has…
CVE-2025-20708 - CVSS 8.8 (high), 2025-09-01: In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected…
CVE-2025-20703 - CVSS 6.5 (medium), 2025-09-01: In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a…
CVE-2025-20678 - CVSS 6.5 (medium), 2025-06-02: In ims service, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a…
CVE-2025-20667 - CVSS 7.5 (high), 2025-05-05: In Modem, there is a possible information disclosure due to incorrect error handling. This could lead to remote information disclosure, if a UE has connected…
CVE-2025-20666 - CVSS 7.5 (high), 2025-05-05: In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base…
CVE-2025-20659 - CVSS 6.5 (medium), 2025-04-07: In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue…
CVE-2025-20644 - CVSS 6.5 (medium), 2025-03-03: In Modem, there is a possible memory corruption due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue…
CVE-2025-20647 - CVSS 6.5 (medium), 2025-03-03: In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base…
CVE-2024-20154 - CVSS 8.8 (high), 2025-01-06: In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution, if a UE has connected to a rogue…
CVE-2024-20150 - CVSS 7.5 (high), 2025-01-06: In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service with no additional execution privileges needed.…
CVE-2024-20149 - CVSS 7.5 (high), 2025-01-06: In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution…
CVE-2024-20094 - CVSS 7.5 (high), 2024-10-07: In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges…
CVE-2024-20082 - CVSS 9.8 (critical), 2024-08-14: In Modem, there is a possible memory corruption due to a missing bounds check. This could lead to remote code execution with no additional execution…
CVE-2024-20080 - CVSS 9.8 (critical), 2024-07-01: In gnss service, there is a possible escalation of privilege due to improper certificate validation. This could lead to remote escalation of privilege with no…
CVE-2024-20079 - CVSS 9.8 (critical), 2024-07-01: In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System…
CVE-2024-20081 - CVSS 9.8 (critical), 2024-07-01: In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System…
CVE-2024-20070 - CVSS 5.1 (medium), 2024-06-03: In modem, there is a possible information disclosure due to using risky cryptographic algorithm during connection establishment negotiation. This could lead…
CVE-2024-20069 - CVSS 6.5 (medium), 2024-06-03: In modem, there is a possible selection of less-secure algorithm during the VoWiFi IKE due to a missing DH downgrade check. This could lead to remote…
CVE-2024-20064 - CVSS 7.8 (high), 2024-05-06: In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional…
CVE-2024-20045 - CVSS 2.3 (low), 2024-04-01: In audio, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information disclosure with System…
CVE-2024-20054 - CVSS 6.6 (medium), 2024-04-01: In gnss, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2024-20040 - CVSS 8.8 (high), 2024-04-01: In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no…
CVE-2024-20039 - CVSS 8.8 (high), 2024-04-01: In modem protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional…
CVE-2024-20005 - CVSS 8.2 (high), 2024-03-04: In da, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution…
CVE-2024-20010 - CVSS 6.7 (medium), 2024-02-05: In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with System execution…
CVE-2024-20015 - CVSS 7.8 (high), 2024-02-05: In telephony, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege with no additional…
CVE-2024-20004 - CVSS 7.5 (high), 2024-02-05: In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent invalid NR RRC…
CVE-2024-20013 - CVSS 6.7 (medium), 2024-02-05: In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2024-20003 - CVSS 7.5 (high), 2024-02-05: In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent invalid NR RRC…
CVE-2024-20012 - CVSS 6.7 (medium), 2024-02-05: In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with System execution…
CVE-2023-32886 - CVSS 7.5 (high), 2024-01-02: In Modem IMS SMS UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional…
CVE-2023-32889 - CVSS 7.5 (high), 2024-01-02: In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional…
CVE-2023-32883 - CVSS 6.7 (medium), 2024-01-02: In Engineer Mode, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System…
CVE-2023-32888 - CVSS 7.5 (high), 2024-01-02: In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional…
CVE-2023-32887 - CVSS 7.5 (high), 2024-01-02: In Modem IMS Stack, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution…
CVE-2023-32875 - CVSS 4.4 (medium), 2024-01-02: In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2023-32874 - CVSS 9.8 (critical), 2024-01-02: In Modem IMS Stack, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional…
CVE-2023-32872 - CVSS 6.7 (medium), 2024-01-02: In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-32876 - CVSS 4.4 (medium), 2024-01-02: In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2023-32855 - CVSS 6.7 (medium), 2023-12-04: In aee, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution…
CVE-2023-32843 - CVSS 7.5 (high), 2023-12-04: In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC…
CVE-2023-32846 - CVSS 7.5 (high), 2023-12-04: In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC…
CVE-2023-32842 - CVSS 7.5 (high), 2023-12-04: In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC…
CVE-2023-32845 - CVSS 7.5 (high), 2023-12-04: In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC…
CVE-2023-32841 - CVSS 7.5 (high), 2023-12-04: In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC…
CVE-2023-32844 - CVSS 7.5 (high), 2023-12-04: In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC…
CVE-2023-32840 - CVSS 8.4 (high), 2023-11-06: In modem CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-32835 - CVSS 6.7 (medium), 2023-11-06: In keyinstall, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges…
CVE-2023-20702 - CVSS 7.5 (high), 2023-11-06: In 5G NRLC, there is a possible invalid memory access due to lack of error handling. This could lead to remote denial of service, if UE received invalid…
CVE-2023-32824 - CVSS 6.7 (medium), 2023-10-02: In rpmb , there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed.…
CVE-2023-20819 - CVSS 9.8 (critical), 2023-10-02: In CDMA PPP protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no…
CVE-2023-32823 - CVSS 6.7 (medium), 2023-10-02: In rpmb , there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-32820 - CVSS 7.5 (high), 2023-10-02: In wlan firmware, there is a possible firmware assertion due to improper input handling. This could lead to remote denial of service with no additional…
CVE-2023-32806 - CVSS 6.7 (medium), 2023-09-04: In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System…
CVE-2023-20833 - CVSS 4.4 (medium), 2023-09-04: In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2023-20832 - CVSS 6.7 (medium), 2023-09-04: In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-20828 - CVSS 6.7 (medium), 2023-09-04: In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-20831 - CVSS 6.7 (medium), 2023-09-04: In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-20827 - CVSS 6.7 (medium), 2023-09-04: In ims service, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution…
CVE-2023-20830 - CVSS 6.7 (medium), 2023-09-04: In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-20829 - CVSS 6.7 (medium), 2023-09-04: In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-20821 - CVSS 6.7 (medium), 2023-09-04: In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-20812 - CVSS 4.4 (medium), 2023-08-07: In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System…
CVE-2023-20815 - CVSS 6.7 (medium), 2023-08-07: In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System…
CVE-2023-20818 - CVSS 4.4 (medium), 2023-08-07: In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System…
CVE-2023-20814 - CVSS 6.7 (medium), 2023-08-07: In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System…
CVE-2023-20817 - CVSS 6.7 (medium), 2023-08-07: In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System…
CVE-2023-20813 - CVSS 4.4 (medium), 2023-08-07: In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System…
CVE-2023-20816 - CVSS 6.7 (medium), 2023-08-07: In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System…
CVE-2023-20790 - CVSS 4.4 (medium), 2023-08-07: In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2023-20795 - CVSS 6.7 (medium), 2023-08-07: In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-20793 - CVSS 4.4 (medium), 2023-08-07: In apu, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges…
CVE-2023-20782 - CVSS 4.4 (medium), 2023-08-07: In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2023-20785 - CVSS 6.4 (medium), 2023-08-07: In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-20781 - CVSS 4.4 (medium), 2023-08-07: In keyinstall, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution…
CVE-2023-20784 - CVSS 6.7 (medium), 2023-08-07: In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-20780 - CVSS 4.4 (medium), 2023-08-07: In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2023-20783 - CVSS 6.7 (medium), 2023-08-07: In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-20768 - CVSS 6.7 (medium), 2023-07-04: In ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege with System execution privileges…
CVE-2023-20766 - CVSS 6.7 (medium), 2023-07-04: In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-20761 - CVSS 6.7 (medium), 2023-07-04: In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-20753 - CVSS 6.7 (medium), 2023-07-04: In rpmb, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges…
CVE-2023-20756 - CVSS 6.7 (medium), 2023-07-04: In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution…
CVE-2023-20755 - CVSS 6.7 (medium), 2023-07-04: In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution…