Mt8675 (Mediatek Inc.) - vulnerabilities (CVEs)

192 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-12-02. Vendor: Mediatek Inc..

CVEs of Mt8675

CVE-2025-20791 - CVSS 6.5 (medium), 2025-12-02: In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base…
CVE-2025-20790 - CVSS 5.3 (medium), 2025-12-02: In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue…
CVE-2025-20759 - CVSS 6.5 (medium), 2025-12-02: In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue…
CVE-2025-20758 - CVSS 4.9 (medium), 2025-12-02: In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base…
CVE-2025-20757 - CVSS 6.5 (medium), 2025-12-02: In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue…
CVE-2025-20753 - CVSS 5.3 (medium), 2025-12-02: In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base…
CVE-2025-20756 - CVSS 6.5 (medium), 2025-12-02: In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station…
CVE-2025-20751 - CVSS 6.5 (medium), 2025-12-02: In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base…
CVE-2025-20755 - CVSS 5.3 (medium), 2025-12-02: In Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a…
CVE-2025-20750 - CVSS 6.5 (medium), 2025-12-02: In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue…
CVE-2025-20754 - CVSS 5.3 (medium), 2025-12-02: In Modem, there is a possible system crash due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue…
CVE-2025-20727 - CVSS 8.1 (high), 2025-11-04: In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege, if a UE has connected to a…
CVE-2025-20726 - CVSS 7.5 (high), 2025-11-04: In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected…
CVE-2025-20725 - CVSS 7.5 (high), 2025-11-04: In ims service, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has…
CVE-2025-20708 - CVSS 8.8 (high), 2025-09-01: In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected…
CVE-2025-20703 - CVSS 6.5 (medium), 2025-09-01: In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a…
CVE-2025-20678 - CVSS 6.5 (medium), 2025-06-02: In ims service, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a…
CVE-2025-20670 - CVSS 5.7 (medium), 2025-05-05: In Modem, there is a possible permission bypass due to improper certificate validation. This could lead to remote information disclosure, if a UE has…
CVE-2025-20667 - CVSS 7.5 (high), 2025-05-05: In Modem, there is a possible information disclosure due to incorrect error handling. This could lead to remote information disclosure, if a UE has connected…
CVE-2025-20666 - CVSS 7.5 (high), 2025-05-05: In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base…
CVE-2025-20659 - CVSS 6.5 (medium), 2025-04-07: In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue…
CVE-2025-20652 - CVSS 4.6 (medium), 2025-03-03: In V5 DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical…
CVE-2025-20647 - CVSS 6.5 (medium), 2025-03-03: In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base…
CVE-2025-20642 - CVSS 6.6 (medium), 2025-02-03: In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical…
CVE-2025-20641 - CVSS 7.3 (high), 2025-02-03: In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical…
CVE-2025-20640 - CVSS 6.2 (medium), 2025-02-03: In DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical…
CVE-2025-20643 - CVSS 5.7 (medium), 2025-02-03: In DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical…
CVE-2025-20639 - CVSS 6.6 (medium), 2025-02-03: In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical…
CVE-2025-20638 - CVSS 4.6 (medium), 2025-02-03: In DA, there is a possible read of uninitialized heap data due to uninitialized data. This could lead to local information disclosure, if an attacker has…
CVE-2024-20141 - CVSS 6.8 (medium), 2025-02-03: In V5 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical…
CVE-2024-20142 - CVSS 6.6 (medium), 2025-02-03: In V5 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical…
CVE-2024-20149 - CVSS 7.5 (high), 2025-01-06: In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution…
CVE-2024-20154 - CVSS 8.8 (high), 2025-01-06: In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution, if a UE has connected to a rogue…
CVE-2024-20150 - CVSS 7.5 (high), 2025-01-06: In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service with no additional execution privileges needed.…
CVE-2024-20108 - CVSS 6.7 (medium), 2024-11-04: In atci, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2024-20098 - CVSS 6.7 (medium), 2024-10-07: In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2024-20097 - CVSS 4.4 (medium), 2024-10-07: In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2024-20096 - CVSS 4.4 (medium), 2024-10-07: In m4u, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges…
CVE-2024-20095 - CVSS 4.4 (medium), 2024-10-07: In m4u, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges…
CVE-2024-20094 - CVSS 7.5 (high), 2024-10-07: In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges…
CVE-2024-20085 - CVSS 4.4 (medium), 2024-09-02: In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2024-20084 - CVSS 4.4 (medium), 2024-09-02: In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2024-20070 - CVSS 5.1 (medium), 2024-06-03: In modem, there is a possible information disclosure due to using risky cryptographic algorithm during connection establishment negotiation. This could lead…
CVE-2024-20075 - CVSS 6.7 (medium), 2024-06-03: In eemgpu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2024-20069 - CVSS 6.5 (medium), 2024-06-03: In modem, there is a possible selection of less-secure algorithm during the VoWiFi IKE due to a missing DH downgrade check. This could lead to remote…
CVE-2024-20068 - CVSS 5.9 (medium), 2024-06-03: In modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution…
CVE-2024-20021 - CVSS 6.7 (medium), 2024-05-06: In atf spm, there is a possible way to remap physical memory to virtual memory due to a logic error. This could lead to local escalation of privilege with…
CVE-2024-20039 - CVSS 8.8 (high), 2024-04-01: In modem protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional…
CVE-2024-20037 - CVSS 6.7 (medium), 2024-03-04: In pq, there is a possible write-what-where condition due to an incorrect bounds check. This could lead to local escalation of privilege with System execution…
CVE-2024-20033 - CVSS 4.4 (medium), 2024-03-04: In nvram, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2024-20038 - CVSS 3.4 (low), 2024-03-04: In pq, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution…
CVE-2024-20005 - CVSS 8.2 (high), 2024-03-04: In da, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution…
CVE-2024-20010 - CVSS 6.7 (medium), 2024-02-05: In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with System execution…
CVE-2024-20004 - CVSS 7.5 (high), 2024-02-05: In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent invalid NR RRC…
CVE-2024-20003 - CVSS 7.5 (high), 2024-02-05: In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent invalid NR RRC…
CVE-2024-20013 - CVSS 6.7 (medium), 2024-02-05: In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-32886 - CVSS 7.5 (high), 2024-01-02: In Modem IMS SMS UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional…
CVE-2023-32872 - CVSS 6.7 (medium), 2024-01-02: In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-32876 - CVSS 4.4 (medium), 2024-01-02: In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2023-32875 - CVSS 4.4 (medium), 2024-01-02: In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2023-32859 - CVSS 6.7 (medium), 2023-12-04: In meta, there is a possible classic buffer overflow due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-32840 - CVSS 8.4 (high), 2023-11-06: In modem CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-32835 - CVSS 6.7 (medium), 2023-11-06: In keyinstall, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges…
CVE-2023-32834 - CVSS 6.7 (medium), 2023-11-06: In secmem, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges…
CVE-2023-20702 - CVSS 7.5 (high), 2023-11-06: In 5G NRLC, there is a possible invalid memory access due to lack of error handling. This could lead to remote denial of service, if UE received invalid…
CVE-2023-32827 - CVSS 6.7 (medium), 2023-10-02: In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege with System…
CVE-2023-32826 - CVSS 6.7 (medium), 2023-10-02: In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege with System…
CVE-2023-32820 - CVSS 7.5 (high), 2023-10-02: In wlan firmware, there is a possible firmware assertion due to improper input handling. This could lead to remote denial of service with no additional…
CVE-2023-20819 - CVSS 9.8 (critical), 2023-10-02: In CDMA PPP protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no…
CVE-2023-32805 - CVSS 6.5 (medium), 2023-09-04: In power, there is a possible out of bounds write due to an insecure default value. This could lead to local escalation of privilege with System execution…
CVE-2023-20833 - CVSS 4.4 (medium), 2023-09-04: In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2023-20821 - CVSS 6.7 (medium), 2023-09-04: In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-20790 - CVSS 4.4 (medium), 2023-08-07: In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2023-20782 - CVSS 4.4 (medium), 2023-08-07: In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2023-20781 - CVSS 4.4 (medium), 2023-08-07: In keyinstall, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution…
CVE-2023-20784 - CVSS 6.7 (medium), 2023-08-07: In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-20780 - CVSS 4.4 (medium), 2023-08-07: In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2023-20783 - CVSS 6.7 (medium), 2023-08-07: In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-20768 - CVSS 6.7 (medium), 2023-07-04: In ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege with System execution privileges…
CVE-2023-20766 - CVSS 6.7 (medium), 2023-07-04: In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-20753 - CVSS 6.7 (medium), 2023-07-04: In rpmb, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges…
CVE-2023-20728 - CVSS 4.4 (medium), 2023-06-06: In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2023-20726 - CVSS 3.3 (low), 2023-05-15: In mnld, there is a possible leak of GPS location due to a missing permission check. This could lead to local information disclosure with no additional…
CVE-2023-20696 - CVSS 6.7 (medium), 2023-05-15: In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-20695 - CVSS 6.7 (medium), 2023-05-15: In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-20698 - CVSS 4.4 (medium), 2023-05-15: In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2023-20694 - CVSS 6.7 (medium), 2023-05-15: In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-20697 - CVSS 4.4 (medium), 2023-05-15: In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2023-20674 - CVSS 4.4 (medium), 2023-04-06: In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2023-20677 - CVSS 4.4 (medium), 2023-04-06: In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2023-20688 - CVSS 4.4 (medium), 2023-04-06: In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2023-20670 - CVSS 6.7 (medium), 2023-04-06: In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-20676 - CVSS 4.4 (medium), 2023-04-06: In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2023-20682 - CVSS 6.7 (medium), 2023-04-06: In wlan, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges…
CVE-2023-20664 - CVSS 6.7 (medium), 2023-04-06: In gz, there is a possible double free due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User…
CVE-2023-20675 - CVSS 4.4 (medium), 2023-04-06: In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2023-20679 - CVSS 4.4 (medium), 2023-04-06: In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-20659 - CVSS 6.7 (medium), 2023-04-06: In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-20652 - CVSS 6.7 (medium), 2023-04-06: In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2023-20655 - CVSS 7.8 (high), 2023-04-06: In mmsdk, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local code execution with no additional execution…