← Back

Mediatek

mediatek

288 CVEs • 598 products

Products (598)

Click to collapse
Toggle
Nr15
nr15
Nr16
nr16
Nr17
nr17
Iot Yocto
iot_yocto
Nr17r
nr17r
Lr12a
lr12a
Lr13
lr13
Nbiot Sdk
nbiot_sdk

CVEs (288)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
4Google
LinuxLinuxfoundation+1 more
4Android
Iot YoctoLinux Kernel+1 more
Jun 17, 2026
Sep 4, 2023
N/A· v4
4.2 MEDIUM· v3
N/A· v2
In imgsys, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitatio...Show more
In imgsys, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07197795; Issue ID: ALPS07340357.Show less
4Google
LinuxLinuxfoundation+1 more
4Android
Iot YoctoLinux Kernel+1 more
Jun 17, 2026
Sep 4, 2023
N/A· v4
4.2 MEDIUM· v3
N/A· v2
In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploi...Show more
In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07354058; Issue ID: ALPS07340121.Show less
4Google
LinuxLinuxfoundation+1 more
4Android
Iot YoctoLinux Kernel+1 more
Jun 17, 2026
Sep 4, 2023
N/A· v4
4.2 MEDIUM· v3
N/A· v2
In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploi...Show more
In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07340119; Issue ID: ALPS07340119.Show less
4Google
LinuxLinuxfoundation+1 more
4Android
Iot YoctoLinux Kernel+1 more
Jun 17, 2026
Sep 4, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
In imgsys_cmdq, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for expl...Show more
In imgsys_cmdq, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07354259; Issue ID: ALPS07340477.Show less
4Google
LinuxLinuxfoundation+1 more
4Android
Iot YoctoLinux Kernel+1 more
Jun 17, 2026
Sep 4, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
In imgsys, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitat...Show more
In imgsys, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07326455; Issue ID: ALPS07326441.Show less
4Google
LinuxLinuxfoundation+1 more
4Android
Iot YoctoLinux Kernel+1 more
Jun 17, 2026
Sep 4, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
In imgsys, there is a possible out of bounds read and write due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for...Show more
In imgsys, there is a possible out of bounds read and write due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07326430; Issue ID: ALPS07326430.Show less
4Google
LinuxLinuxfoundation+1 more
4Android
Iot YoctoLinux Kernel+1 more
Jun 17, 2026
Sep 4, 2023
N/A· v4
4.2 MEDIUM· v3
N/A· v2
In imgsys, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitatio...Show more
In imgsys, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07326455; Issue ID: ALPS07326409.Show less
3Google
LinuxfoundationMediatek
3Android
Iot YoctoYocto
Jun 17, 2026
Sep 4, 2023
N/A· v4
6.4 MEDIUM· v3
N/A· v2
In camsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID:...Show more
In camsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07341261; Issue ID: ALPS07326570.Show less
2Google
Mediatek
2Android
Iot Yocto
Jun 17, 2026
Aug 7, 2023
N/A· v4
4.4 MEDIUM· v3
N/A· v2
In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploi...Show more
In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07944987; Issue ID: ALPS07944987.Show less
2Linuxfoundation
Mediatek
12Mt7603 Firmware
Mt7613 FirmwareMt7615 Firmware+9 more
Jun 17, 2026
Jul 4, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
In Wi-Fi, there is a possible low throughput due to misrepresentation of critical information. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed fo...Show more
In Wi-Fi, there is a possible low throughput due to misrepresentation of critical information. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220829014; Issue ID: GN20220829014.Show less
2Google
Mediatek
2Android
Iot Yocto
Jun 17, 2026
May 15, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In vcu, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: AL...Show more
In vcu, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07519103; Issue ID: ALPS07519103.Show less
1Mediatek
2En7528 Firmware
En7580 Firmware
Jun 17, 2026
Feb 6, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interact...Show more
In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID: OSBNB00123241.Show less
1Mediatek
2En7528 Firmware
En7580 Firmware
Jun 17, 2026
Feb 6, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
In Boa, there is a possible escalation of privilege due to a missing permission check. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User inter...Show more
In Boa, there is a possible escalation of privilege due to a missing permission check. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID: OSBNB00123241.Show less
1Mediatek
2En7528 Firmware
En7580 Firmware
Jun 17, 2026
Feb 6, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
In Boa, there is a possible information disclosure due to a missing permission check. This could lead to remote information disclosure to a proximal attacker with no additional execution privileges needed. User interacti...Show more
In Boa, there is a possible information disclosure due to a missing permission check. This could lead to remote information disclosure to a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID: OSBNB00123241.Show less
1Mediatek
2En7528 Firmware
En7580 Firmware
Jun 17, 2026
Feb 6, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User i...Show more
In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID: OSBNB00123234.Show less
1Mediatek
2En7528 Firmware
En7580 Firmware
Jun 17, 2026
Feb 6, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User i...Show more
In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID: OSBNB00123234.Show less
1Mediatek
2En7528 Firmware
En7580 Firmware
Jun 17, 2026
Feb 6, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User i...Show more
In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID: OSBNB00123234.Show less
1Mediatek
22Mt5221 Firmware
Mt7603 FirmwareMt7613 Firmware+19 more
Jun 17, 2026
Feb 6, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
In Wi-Fi driver, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitati...Show more
In Wi-Fi driver, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220720014; Issue ID: GN20220720014.Show less
1Mediatek
30Mt5221 Firmware
Mt7603 FirmwareMt7613 Firmware+27 more
Jun 17, 2026
Feb 6, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploi...Show more
In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705035; Issue ID: GN20220705035.Show less
1Mediatek
30Mt5221 Firmware
Mt7603 FirmwareMt7613 Firmware+27 more
Jun 17, 2026
Feb 6, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploi...Show more
In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705028; Issue ID: GN20220705028.Show less