Mt8518s (Mediatek Inc.) - vulnerabilities (CVEs)

16 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2025-02-03. Vendor: Mediatek Inc..

CVEs of Mt8518s

CVE-2024-20147 - CVSS 5.3 (medium), 2025-02-03: In Bluetooth FW, there is a possible reachable assertion due to improper exception handling. This could lead to remote denial of service with no additional…
CVE-2024-20148 - CVSS 9.8 (critical), 2025-01-06: In wlan STA FW, there is a possible out of bounds write due to improper input validation. This could lead to remote (proximal/adjacent) code execution with no…
CVE-2024-20153 - CVSS 7.5 (high), 2025-01-06: In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID. This could lead to remote information disclosure with no…
CVE-2024-20152 - CVSS 4.4 (medium), 2025-01-06: In wlan STA driver, there is a possible reachable assertion due to improper exception handling. This could lead to local denial of service if a malicious…
CVE-2024-20146 - CVSS 8.1 (high), 2025-01-06: In wlan STA driver, there is a possible out of bounds write due to improper input validation. This could lead to remote (proximal/adjacent) code execution…
CVE-2024-20140 - CVSS 6.7 (medium), 2025-01-06: In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…
CVE-2024-20139 - CVSS 6.5 (medium), 2024-12-02: In Bluetooth firmware, there is a possible firmware asssert due to improper handling of exceptional conditions. This could lead to local denial of service…
CVE-2024-20040 - CVSS 8.8 (high), 2024-04-01: In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no…
CVE-2023-32820 - CVSS 7.5 (high), 2023-10-02: In wlan firmware, there is a possible firmware assertion due to improper input handling. This could lead to remote denial of service with no additional…
CVE-2023-32810 - CVSS 4.4 (medium), 2023-09-04: In bluetooth driver, there is a possible out of bounds read due to improper input validation. This could lead to local information leak with System execution…
CVE-2022-32655 - CVSS 6.7 (medium), 2023-02-06: In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System…
CVE-2022-32654 - CVSS 6.7 (medium), 2023-02-06: In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System…
CVE-2022-32663 - CVSS 7.5 (high), 2023-02-06: In Wi-Fi driver, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional execution…
CVE-2022-32656 - CVSS 6.7 (medium), 2023-02-06: In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System…
CVE-2022-32659 - CVSS 6.7 (medium), 2023-01-03: In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System…
CVE-2022-32639 - CVSS 4.4 (medium), 2023-01-03: In watchdog, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution…