Mt8390 (Mediatek Inc.) - vulnerabilities (CVEs)

50 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-11-04. Vendor: Mediatek Inc..

CVEs of Mt8390

CVE-2025-20745 - CVSS 4.2 (medium), 2025-11-04: In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already…
CVE-2025-20743 - CVSS 4.2 (medium), 2025-11-04: In clkdbg, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has…
CVE-2025-20721 - CVSS 7.8 (high), 2025-10-14: In imgsensor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…
CVE-2025-20696 - CVSS 6.8 (medium), 2025-08-04: In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical…
CVE-2025-20694 - CVSS 6.5 (medium), 2025-07-08: In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution…
CVE-2025-20665 - CVSS 5.5 (medium), 2025-05-05: In devinfo, there is a possible information disclosure due to a missing SELinux policy. This could lead to local information disclosure of device identifier…
CVE-2025-20656 - CVSS 6.8 (medium), 2025-04-07: In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical…
CVE-2025-20653 - CVSS 6.5 (medium), 2025-03-03: In da, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure, if an attacker has physical access…
CVE-2025-20651 - CVSS 4.1 (medium), 2025-03-03: In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical…
CVE-2025-20650 - CVSS 6.8 (medium), 2025-03-03: In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical…
CVE-2025-20648 - CVSS 5.5 (medium), 2025-03-03: In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution…
CVE-2025-20635 - CVSS 6.6 (medium), 2025-02-03: In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical…
CVE-2024-20147 - CVSS 5.3 (medium), 2025-02-03: In Bluetooth FW, there is a possible reachable assertion due to improper exception handling. This could lead to remote denial of service with no additional…
CVE-2024-20143 - CVSS 6.6 (medium), 2025-01-06: In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical…
CVE-2024-20144 - CVSS 6.6 (medium), 2025-01-06: In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical…
CVE-2024-20138 - CVSS 7.5 (high), 2024-12-02: In wlan driver, there is a possible out of bound read due to improper input validation. This could lead to remote information disclosure with no additional…
CVE-2024-20136 - CVSS 6.2 (medium), 2024-12-02: In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution…
CVE-2024-20125 - CVSS 6.7 (medium), 2024-12-02: In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…
CVE-2024-20108 - CVSS 6.7 (medium), 2024-11-04: In atci, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2024-20107 - CVSS 6.2 (medium), 2024-11-04: In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution…
CVE-2024-20104 - CVSS 8.4 (high), 2024-11-04: In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution…
CVE-2024-20085 - CVSS 4.4 (medium), 2024-09-02: In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2024-20084 - CVSS 4.4 (medium), 2024-09-02: In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2024-20059 - CVSS 6.7 (medium), 2024-05-06: In da, there is a possible escalation of privilege due to an incorrect status check. This could lead to local escalation of privilege with System execution…
CVE-2023-32871 - CVSS 5.3 (medium), 2024-05-06: In DA, there is a possible permission bypass due to an incorrect status check. This could lead to local escalation of privilege with no additional execution…
CVE-2024-20060 - CVSS 5.9 (medium), 2024-05-06: In da, there is a possible escalation of privilege due to an incorrect status check. This could lead to local escalation of privilege with System execution…
CVE-2024-20051 - CVSS 2.3 (low), 2024-04-01: In flashc, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with System execution privileges needed.…
CVE-2024-20054 - CVSS 6.6 (medium), 2024-04-01: In gnss, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2024-20050 - CVSS 4.4 (medium), 2024-04-01: In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution…
CVE-2024-20053 - CVSS 8.4 (high), 2024-04-01: In flashc, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of privilege with System execution…
CVE-2024-20049 - CVSS 4.4 (medium), 2024-04-01: In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution…
CVE-2024-20052 - CVSS 4.4 (medium), 2024-04-01: In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution…
CVE-2024-20055 - CVSS 6.3 (medium), 2024-04-01: In imgsys, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2024-20048 - CVSS 6.2 (medium), 2024-04-01: In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution…
CVE-2024-20040 - CVSS 8.8 (high), 2024-04-01: In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no…
CVE-2024-20020 - CVSS 4.4 (medium), 2024-03-04: In OPTEE, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local information disclosure with System execution…
CVE-2024-20033 - CVSS 4.4 (medium), 2024-03-04: In nvram, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2024-20023 - CVSS 6.7 (medium), 2024-03-04: In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution…
CVE-2023-32891 - CVSS 6.7 (medium), 2024-01-02: In bluetooth service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System…
CVE-2023-32883 - CVSS 6.7 (medium), 2024-01-02: In Engineer Mode, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System…
CVE-2023-32859 - CVSS 6.7 (medium), 2023-12-04: In meta, there is a possible classic buffer overflow due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-32847 - CVSS 7.8 (high), 2023-12-04: In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution…
CVE-2023-32838 - CVSS 6.7 (medium), 2023-11-06: In dpe, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System execution…
CVE-2023-32825 - CVSS 5.5 (medium), 2023-11-06: In bluethooth service, there is a possible out of bounds reads due to improper input validation. This could lead to local information disclosure with no…
CVE-2023-32827 - CVSS 6.7 (medium), 2023-10-02: In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege with System…
CVE-2023-32826 - CVSS 6.7 (medium), 2023-10-02: In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege with System…
CVE-2023-32829 - CVSS 6.7 (medium), 2023-10-02: In apusys, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution…
CVE-2023-32828 - CVSS 6.7 (medium), 2023-10-02: In vpu, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges…
CVE-2023-32822 - CVSS 6.7 (medium), 2023-10-02: In ftm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-20688 - CVSS 4.4 (medium), 2023-04-06: In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution…