← Back

Mt6980d Firmware

mt6980d_firmware

Vendor: Mediatek • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-20480
1Mediatek
7Mt2735 Firmware
Mt2737 FirmwareMt6880 Firmware+4 more
Aug 19, 2026
Aug 3, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patc...Show more
In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10960023 (Note: For MT6880, MT6890, MT6980D, MT6988, MT6990) / AUTO00851189 (Note: For MT2735, MT3737); Issue ID: MSV-7586.Show less
CVE-2026-20433
1Mediatek
62Mt2735 Firmware
Mt2737 FirmwareMt6813 Firmware+59 more
Jun 17, 2026
Apr 7, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additi...Show more
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01088681; Issue ID: MSV-4460.Show less
CVE-2025-20659
1Mediatek
85Mt2735 Firmware
Mt2737 FirmwareMt6739 Firmware+82 more
Jun 17, 2026
Apr 7, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execu...Show more
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01519028; Issue ID: MSV-2768.Show less