Mt8678 Firmware

mt8678_firmware

Vendor: Mediatek • 7 CVEs

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-20451 1Mediatek 32Mt2718 Firmware Mt6899 FirmwareMt6985 Firmware+29 more Jun 17, 2026 May 4, 2026 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for...Show more In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10828685; Issue ID: MSV-6504.Show less
CVE-2026-20450 1Mediatek 51Mt2735 Firmware Mt2737 FirmwareMt6833 Firmware+48 more Jun 17, 2026 May 4, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execut...Show more In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01753620; Issue ID: MSV-6100.Show less
CVE-2026-20449 1Mediatek 68Mt2735 Firmware Mt2737 FirmwareMt6739 Firmware+65 more Jun 17, 2026 May 4, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 In Modem, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional executio...Show more In Modem, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01760138; Issue ID: MSV-6148.Show less
CVE-2026-20433 1Mediatek 62Mt2735 Firmware Mt2737 FirmwareMt6813 Firmware+59 more Jun 17, 2026 Apr 7, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additi...Show more In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01088681; Issue ID: MSV-4460.Show less
CVE-2026-20432 1Mediatek 58Mt2735 Firmware Mt2737 FirmwareMt6779 Firmware+55 more Jul 24, 2026 Apr 7, 2026 N/A· v4 8.0 HIGH· v3 N/A· v2 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additi...Show more In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01406170; Issue ID: MSV-4461.Show less
CVE-2026-20431 1Mediatek 19Mt6813 Firmware Mt6815 FirmwareMt6835 Firmware+16 more Jul 24, 2026 Apr 7, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privile...Show more In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01106496; Issue ID: MSV-4467.Show less
CVE-2025-20659 1Mediatek 85Mt2735 Firmware Mt2737 FirmwareMt6739 Firmware+82 more Jun 17, 2026 Apr 7, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execu...Show more In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01519028; Issue ID: MSV-2768.Show less