9
CVEs
0
Critical
2
High
0
KEV
0
PoC
0
Unpatched C/H
100.0%
Patch Rate
0.2%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
2
MEDIUM
1
LOW
0
Monthly CVE Trend
Affected Products (30)
Android
131
Nr15
64
Linux Kernel
62
Software Development Kit
58
Nr16
57
Nr17
48
Openwrt
42
Mt7915 Firmware
28
Mt7615 Firmware
28
Mt7629 Firmware
28
Mt7622 Firmware
28
Mt7628 Firmware
28
Mt7613 Firmware
28
Yocto
27
Iot Yocto
23
Nr17r
20
Mt7603E Firmware
20
Mt7620 Firmware
18
Mt7612 Firmware
18
Mt7610 Firmware
17
Lr12a
16
Lr13
14
Nbiot Sdk
9
Mt8981 Firmware
8
Mt7916 Firmware
8
Mt7603 Firmware
8
Mt7986 Firmware
8
Debian Linux
6
Modem
4
Mt7922 Firmware
3
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-80750 | Use-after-free in the Linux kernel's MediaTek power domain driver exposes kernel memory to potential corruption via a dangling device-tree node pointer. In scpsys_get_bus_protection_legacy(), two error paths call of_node_put() to release infracfg and SMI device-tree node references before those nodes are passed to dev_err_probe() with the %pOF format specifier; if the put drops the last reference, the formatter dereferences freed memory. Vendor patches are available for Linux 6.18.46, 7.1.10, and 7.2, and EPSS exploitation probability sits at 0.20% (10th percentile) with no confirmed active exploitation. | HIGH | 8.4 | 0.2% | 42 |
|
| CVE-2026-80751 | Uninitialized pointer dereference in the Linux kernel's MediaTek GPU power-domain driver (`pmdomain/mediatek/mfg`) can trigger a kernel fault or incorrect OPP (Operating Performance Point) configuration on first device attachment. The `prev_o` variable in `mtk_mfg_attach_dev()` is read in a conditional branch on the first loop iteration before ever being assigned, meaning it holds an indeterminate stack value; if that value is non-NULL, the kernel dereferences a stale or garbage pointer. Affected versions span stable kernel trees from commit f08e7a4e8d6a through the fixed points in 7.1.10, 7.2, and 6.19. No public exploit code and no CISA KEV listing are present; EPSS at 0.19% (9th percentile) reflects minimal real-world exploitation interest. | HIGH | 7.8 | 0.2% | 39 |
|
| CVE-2026-53317 | Firmware crash in the Linux kernel's mt76/mt7921 WiFi driver allows a local low-privileged user to cause denial of service by triggering station Association ID (AID) values above the firmware's undocumented limit of 20. Affected hardware includes Mediatek mt7922 chipsets operating in AP mode (IFTYPE_AP). Exploitation requires running a non-standard hostapd configuration that allocates AIDs starting at 65 or higher - stock hostapd is not affected. No public exploit has been identified and EPSS is 0.16% (5th percentile), indicating very low exploitation likelihood. | MEDIUM | 5.5 | 0.2% | 28 |
|
| CVE-2026-63862 | In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found In mtk_pcie_s | – | 0.2% | 0 |
|
|
| CVE-2026-64461 | In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Fix IRQ domain leak when port fails to enable When mtk_pcie_enabl | – | 0.2% | – |
|
|
| CVE-2026-72008 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: Fix possible nullptr KP in HWV cleanup/on-check Should probe | – | 0.2% | – |
|
|
| CVE-2026-72258 | In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8183: Release reserved memory on cleanup The MT8183 AFE probe | – | 0.2% | – |
|
|
| CVE-2026-72259 | In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8192: Release reserved memory on cleanup The MT8192 AFE probe | – | 0.2% | – |
|
|
| CVE-2026-72260 | In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8192: Check runtime resume during probe The MT8192 AFE probe e | – | 0.2% | – |
|