MediaTek Modem CVE-2026-20500

Out-of-bounds write in MediaTek modem firmware enables remote privilege escalation when devices connect to attacker-cont

Heap buffer overflow in the vdec (video decoder) kernel driver across 53+ MediaTek SoCs allows a local unprivileged atta

Local privilege escalation in MediaTek's vdec (video decoder) kernel driver affects more than 53 distinct chipset varian

Heap-based buffer overflow in the MediaTek WLAN AP driver enables an adjacent-network attacker to escalate privileges wi

Out-of-bounds write in MediaTek modem chipset implementations allows remote privilege escalation when user equipment con

Heap buffer overflow in the MediaTek WLAN access point driver allows adjacent-network attackers with low-privilege user

Local privilege escalation in MediaTek's Bluetooth driver affects six Wi-Fi/Bluetooth combo chipsets (MT7902, MT7920, MT

Local privilege escalation in MediaTek GenieZone (trusted execution environment) allows an attacker who has already gain

Privilege escalation in MediaTek's Android Telephony component enables any locally-installed application - regardless of

Out-of-bounds read in MediaTek modem firmware across 19 chipsets enables remote denial of service when a User Equipment

Remote privilege escalation in the baseband modem firmware of dozens of MediaTek chipsets allows an attacker operating a

Privilege escalation via a double-free memory corruption bug in camera middleware affects 17 MediaTek chipset variants,