MediaTek vulnerabilities
1,103 CVEs and advisories name MediaTek as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-20077In Modem, there is a possible system crash due to incorrect error handling.
- CVE-2024-20075In eemgpu, there is a possible out of bounds write due to a missing bounds check.
- CVE-2024-20074In dmc, there is a possible out of bounds write due to a missing bounds check.
- CVE-2024-20073In wlan service, there is a possible out of bounds write due to improper input validation.
- CVE-2024-20072In wlan driver, there is a possible out of bounds write due to improper input validation.
- CVE-2024-20071In wlan driver, there is a possible out of bounds read due to improper input validation.
- CVE-2024-20070In modem, there is a possible information disclosure due to using risky cryptographic algorithm during connection establishment negotiation.
- CVE-2024-20069In modem, there is a possible selection of less-secure algorithm during the VoWiFi IKE due to a missing DH downgrade check.
- CVE-2024-20068In modem, there is a possible system crash due to improper input validation.
- CVE-2024-20067In modem, there is a possible out of bounds write due to improper input invalidation.
- CVE-2024-20066In modem, there is a possible out of bounds write due to an incorrect bounds check.
- CVE-2024-20065In telephony, there is a possible information disclosure due to a missing permission check.
- CVE-2024-20021In atf spm, there is a possible way to remap physical memory to virtual memory due to a logic error.
- CVE-2024-20064In wlan service, there is a possible out of bounds write due to improper input validation.
- CVE-2024-20060In da, there is a possible escalation of privilege due to an incorrect status check.
- CVE-2024-20059In da, there is a possible escalation of privilege due to an incorrect status check.
- CVE-2024-20058In keyInstall, there is a possible out of bounds read due to a missing bounds check.
- CVE-2023-32871In DA, there is a possible permission bypass due to an incorrect status check.
- CVE-2023-32873In keyInstall, there is a possible out of bounds write due to a missing bounds check.
- CVE-2024-20057In keyInstall, there is a possible out of bounds write due to a missing bounds check.
- CVE-2024-20056In preloader, there is a possible escalation of privilege due to an insecure default value.
- CVE-2024-20055In imgsys, there is a possible information disclosure due to a missing bounds check.
- CVE-2024-20054In gnss, there is a possible escalation of privilege due to a missing bounds check.
- CVE-2024-20053In flashc, there is a possible out of bounds write due to an uncaught exception.
- CVE-2024-20052In flashc, there is a possible information disclosure due to an uncaught exception.
- CVE-2024-20051In flashc, there is a possible system crash due to an uncaught exception.
- CVE-2024-20050In flashc, there is a possible information disclosure due to an uncaught exception.
- CVE-2024-20049In flashc, there is a possible information disclosure due to an uncaught exception.
- CVE-2024-20048In flashc, there is a possible information disclosure due to an uncaught exception.
- CVE-2024-20047In battery, there is a possible out of bounds read due to an integer overflow.