MediaTek Modem CVE-2026-20479

Out-of-bounds write in MediaTek modem firmware enables remote privilege escalation when devices connect to attacker-cont

Heap-based buffer overflow in the MediaTek WLAN AP driver enables an adjacent-network attacker to escalate privileges wi

Out-of-bounds write in MediaTek modem chipset implementations allows remote privilege escalation when user equipment con

Heap buffer overflow in the MediaTek WLAN access point driver allows adjacent-network attackers with low-privilege user

Local privilege escalation in MediaTek's Bluetooth driver affects six Wi-Fi/Bluetooth combo chipsets (MT7902, MT7920, MT

Local privilege escalation in MediaTek GenieZone (trusted execution environment) allows an attacker who has already gain

Privilege escalation in MediaTek's Android Telephony component enables any locally-installed application - regardless of

Remote privilege escalation in the baseband modem firmware of dozens of MediaTek chipsets allows an attacker operating a

Heap buffer overflow in the Telephony subsystem of MediaTek chipsets enables local privilege escalation on affected Andr

Local privilege escalation in the Modem component across 80+ MediaTek chipsets allows an attacker already holding System

Incorrect error handling in the MediaTek imgsensor (camera/image sensor) kernel driver across multiple MediaTek chipsets

Local privilege escalation in MediaTek's geniezone hypervisor component affects 36 distinct chipsets spanning budget to