Mt8788e (Mediatek Inc.) - vulnerabilities (CVEs)
18 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-11-04. Vendor: Mediatek Inc..
CVEs of Mt8788e
- CVE-2025-20743 - CVSS 4.2 (medium), 2025-11-04: In clkdbg, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has…
- CVE-2025-20727 - CVSS 8.1 (high), 2025-11-04: In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege, if a UE has connected to a…
- CVE-2025-20726 - CVSS 7.5 (high), 2025-11-04: In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected…
- CVE-2025-20725 - CVSS 7.5 (high), 2025-11-04: In ims service, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has…
- CVE-2025-20707 - CVSS 6.7 (medium), 2025-09-01: In geniezone, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already…
- CVE-2025-20698 - CVSS 6.7 (medium), 2025-08-04: In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…
- CVE-2025-20697 - CVSS 6.7 (medium), 2025-08-04: In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…
- CVE-2025-20678 - CVSS 6.5 (medium), 2025-06-02: In ims service, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a…
- CVE-2025-20670 - CVSS 5.7 (medium), 2025-05-05: In Modem, there is a possible permission bypass due to improper certificate validation. This could lead to remote information disclosure, if a UE has…
- CVE-2025-20667 - CVSS 7.5 (high), 2025-05-05: In Modem, there is a possible information disclosure due to incorrect error handling. This could lead to remote information disclosure, if a UE has connected…
- CVE-2025-20665 - CVSS 5.5 (medium), 2025-05-05: In devinfo, there is a possible information disclosure due to a missing SELinux policy. This could lead to local information disclosure of device identifier…
- CVE-2025-20659 - CVSS 6.5 (medium), 2025-04-07: In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue…
- CVE-2024-20150 - CVSS 7.5 (high), 2025-01-06: In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service with no additional execution privileges needed.…
- CVE-2024-20149 - CVSS 7.5 (high), 2025-01-06: In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution…
- CVE-2024-20154 - CVSS 8.8 (high), 2025-01-06: In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution, if a UE has connected to a rogue…
- CVE-2024-20129 - CVSS 7.5 (high), 2024-12-02: In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution…
- CVE-2024-20128 - CVSS 7.5 (high), 2024-12-02: In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution…
- CVE-2024-20127 - CVSS 7.5 (high), 2024-12-02: In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution…
