MediaTek APUSYS CVE-2026-20467

Out-of-bounds write in MediaTek modem firmware enables remote privilege escalation when devices connect to attacker-cont

Heap-based buffer overflow in the MediaTek WLAN AP driver enables an adjacent-network attacker to escalate privileges wi

Out-of-bounds write in MediaTek modem chipset implementations allows remote privilege escalation when user equipment con

Heap buffer overflow in the MediaTek WLAN access point driver allows adjacent-network attackers with low-privilege user

Local privilege escalation in MediaTek's Bluetooth driver affects six Wi-Fi/Bluetooth combo chipsets (MT7902, MT7920, MT

Local privilege escalation in MediaTek GenieZone (trusted execution environment) allows an attacker who has already gain

Privilege escalation in MediaTek's Android Telephony component enables any locally-installed application - regardless of

Out-of-bounds read in MediaTek modem firmware across 19 chipsets enables remote denial of service when a User Equipment

Remote privilege escalation in the baseband modem firmware of dozens of MediaTek chipsets allows an attacker operating a

Heap buffer overflow in the Telephony subsystem of MediaTek chipsets enables local privilege escalation on affected Andr

Local privilege escalation in the Modem component across 80+ MediaTek chipsets allows an attacker already holding System

Incorrect error handling in the MediaTek imgsensor (camera/image sensor) kernel driver across multiple MediaTek chipsets