Vulnerabilities (CVE)

Filtered by vendor Mediatek Subscribe
Total 809 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-20133 1 Mediatek 12 Mt6879, Mt6886, Mt6895 and 9 more 2025-04-22 N/A 6.7 MEDIUM
In Modem, there is a possible escalation of privilege due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01395886; Issue ID: MSV-1871.
CVE-2024-20134 2 Google, Mediatek 14 Android, Mt6835, Mt6878 and 11 more 2025-04-22 N/A 6.7 MEDIUM
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09154589; Issue ID: MSV-1866.
CVE-2024-20135 2 Google, Mediatek 13 Android, Mt6768, Mt6781 and 10 more 2025-04-22 N/A 6.7 MEDIUM
In soundtrigger, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09142526; Issue ID: MSV-1841.
CVE-2024-20136 4 Google, Mediatek, Openwrt and 1 more 32 Android, Mt2737, Mt6781 and 29 more 2025-04-22 N/A 6.2 MEDIUM
In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09121847; Issue ID: MSV-1821.
CVE-2024-20119 2 Google, Mediatek 20 Android, Mt6739, Mt6761 and 17 more 2025-04-22 N/A 6.7 MEDIUM
In mms, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09062301; Issue ID: MSV-1620.
CVE-2024-20120 2 Google, Mediatek 29 Android, Mt6765, Mt6768 and 26 more 2025-04-22 N/A 6.7 MEDIUM
In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08956986; Issue ID: MSV-1575.
CVE-2024-20121 2 Google, Mediatek 29 Android, Mt6765, Mt6768 and 26 more 2025-04-22 N/A 6.7 MEDIUM
In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08956986; Issue ID: MSV-1574.
CVE-2024-20122 2 Google, Mediatek 9 Android, Mt6761, Mt6765 and 6 more 2025-04-22 N/A 4.4 MEDIUM
In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09008925; Issue ID: MSV-1572.
CVE-2024-20123 2 Google, Mediatek 9 Android, Mt6761, Mt6765 and 6 more 2025-04-22 N/A 4.4 MEDIUM
In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09008925; Issue ID: MSV-1569.
CVE-2024-20124 2 Google, Mediatek 9 Android, Mt6761, Mt6765 and 6 more 2025-04-22 N/A 4.4 MEDIUM
In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09008925; Issue ID: MSV-1568.
CVE-2024-20125 2 Google, Mediatek 45 Android, Mt6580, Mt6761 and 42 more 2025-04-22 N/A 6.7 MEDIUM
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained System privileges. User interaction is not needed for exploitation. Patch ID: ALPS09046782; Issue ID: MSV-1728.
CVE-2024-20127 2 Google, Mediatek 47 Android, Mt6580, Mt6739 and 44 more 2025-04-22 N/A 7.5 HIGH
In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09289881; Issue ID: MSV-2023.
CVE-2024-20128 2 Google, Mediatek 47 Android, Mt6580, Mt6739 and 44 more 2025-04-22 N/A 7.5 HIGH
In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09289881; Issue ID: MSV-2024.
CVE-2024-20108 2 Google, Mediatek 65 Android, Mt6580, Mt6739 and 62 more 2025-04-22 N/A 6.7 MEDIUM
In atci, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09082988; Issue ID: MSV-1774.
CVE-2024-20109 2 Google, Mediatek 11 Android, Mt6765, Mt6768 and 8 more 2025-04-22 N/A 6.7 MEDIUM
In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09065928; Issue ID: MSV-1763.
CVE-2024-20110 2 Google, Mediatek 11 Android, Mt6765, Mt6768 and 8 more 2025-04-22 N/A 6.7 MEDIUM
In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09065887; Issue ID: MSV-1762.
CVE-2024-20112 2 Google, Mediatek 6 Android, Mt6878, Mt6886 and 3 more 2025-04-22 N/A 4.4 MEDIUM
In isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09071481; Issue ID: MSV-1730.
CVE-2024-20113 2 Google, Mediatek 5 Android, Mt6765, Mt6768 and 2 more 2025-04-22 N/A 6.7 MEDIUM
In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09036814; Issue ID: MSV-1715.
CVE-2024-20115 2 Google, Mediatek 9 Android, Mt6833, Mt6853 and 6 more 2025-04-22 N/A 6.7 MEDIUM
In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09036695; Issue ID: MSV-1713.
CVE-2024-20116 2 Google, Mediatek 19 Android, Mt6765, Mt6768 and 16 more 2025-04-22 N/A 4.4 MEDIUM
In cmdq, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09057438; Issue ID: MSV-1696.