430
CVEs
26
Critical
177
High
1
KEV
4
PoC
143
Unpatched C/H
30.7%
Patch Rate
0.6%
Avg EPSS
Severity Breakdown
CRITICAL
26
HIGH
177
MEDIUM
215
LOW
6
Monthly CVE Trend
Affected Products (30)
Android
131
Nr15
64
Linux Kernel
62
Software Development Kit
58
Nr16
57
Nr17
48
Openwrt
42
Mt7915 Firmware
28
Mt7615 Firmware
28
Mt7629 Firmware
28
Mt7622 Firmware
28
Mt7628 Firmware
28
Mt7613 Firmware
28
Yocto
27
Iot Yocto
23
Nr17r
20
Mt7603E Firmware
20
Mt7620 Firmware
18
Mt7612 Firmware
18
Mt7610 Firmware
17
Lr12a
16
Lr13
14
Nbiot Sdk
9
Mt8981 Firmware
8
Mt7916 Firmware
8
Mt7603 Firmware
8
Mt7986 Firmware
8
Debian Linux
6
Modem
4
Mt7922 Firmware
3
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2017-3216 | WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remote, unauthenticated attacker to gain administrator access to. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 3.2% | 72 |
PoC
No patch
|
| CVE-2019-15027 | The MediaTek Embedded Multimedia Card (eMMC) subsystem for Android on MT65xx, MT66xx, and MT8163 SoC devices allows attackers to execute arbitrary commands as root via shell metacharacters in a. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 3.2% | 69 |
PoC
No patch
|
| CVE-2024-20017 | In wlan service, there is a possible out of bounds write due to improper input validation. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 46.3% | 69 |
PoC
No patch
|
| CVE-2016-6492 | The MT6573FDVT_SetRegHW function in camera_fdvt.c in the MediaTek driver for Linux allows local users to gain privileges via a crafted application that makes an MT6573FDVTIOC_T_SET_FDCONF_CMD IOCTL. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 7.8 | 0.1% | 59 |
PoC
No patch
|
| CVE-2023-32874 | In Modem IMS Stack, there is a possible out of bounds write due to a missing bounds check. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available. | CRITICAL | 9.8 | 6.0% | 55 |
No patch
|
| CVE-2025-20654 | In wlan service, there is a possible out of bounds write due to an incorrect bounds check. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available. | CRITICAL | 9.8 | 1.4% | 50 |
No patch
|
| CVE-2025-20646 | In wlan AP FW, there is a possible out of bounds write due to improper input validation. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available. | CRITICAL | 9.8 | 0.6% | 50 |
No patch
|
| CVE-2025-20672 | Heap OOB write in Android Bluetooth driver via incorrect bounds check. | CRITICAL | 9.8 | 0.3% | 49 |
No patch
|
| CVE-2025-20674 | Remote privilege escalation in Android WLAN AP driver via packet injection. | CRITICAL | 9.8 | 0.3% | 49 |
No patch
|
| CVE-2025-20680 | In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418044; Issue ID: MSV-3482. | CRITICAL | 9.8 | 0.2% | 49 |
No patch
|
| CVE-2025-20681 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416936; Issue ID: MSV-3446. | CRITICAL | 9.8 | 0.2% | 49 |
No patch
|
| CVE-2025-20682 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416937; Issue ID: MSV-3445. | CRITICAL | 9.8 | 0.2% | 49 |
No patch
|
| CVE-2025-20683 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416938; Issue ID: MSV-3444. | CRITICAL | 9.8 | 0.2% | 49 |
No patch
|
| CVE-2025-20684 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416939; Issue ID: MSV-3422. | CRITICAL | 9.8 | 0.2% | 49 |
No patch
|
| CVE-2022-20083 | In Modem 2G/3G CC, there is a possible out of bounds write due to a missing bounds check. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available. | CRITICAL | 9.8 | 2.5% | 49 |
No patch
|