Mediatek Mt6891 vulnerabilities

• mediatek mt2716 firmware, mt2735 firmware, mt2737 firmware +81 more +83 more In Modem, there is a possible information disclosure due to a logic error. This could lead to... CVE-2026-20543 5.5 MediumOctober 5, 2026
• mediatek mt2716 firmware, mt2735 firmware, mt2737 firmware +81 more +83 more In Modem, there is a possible out of bounds read due to a missing permission check. This could... CVE-2026-20541 5.3 MediumOctober 5, 2026
• mediatek mt2716 firmware, mt2735 firmware, mt2737 firmware +81 more +83 more In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead... CVE-2026-20540 5.3 MediumOctober 5, 2026
• mediatek mt2716 firmware, mt2735 firmware, mt2737 firmware +81 more +83 more In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead... CVE-2026-20539 5.3 MediumOctober 5, 2026
• mediatek mt2716 firmware, mt2735 firmware, mt2737 firmware +81 more +83 more In Modem, there is a possible out of bounds read due to a missing permission check. This could... CVE-2026-20538 5.3 MediumOctober 5, 2026
• mediatek mt2716 firmware, mt2735 firmware, mt2737 firmware +81 more +83 more In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could... CVE-2026-20534 5.3 MediumOctober 5, 2026
• mediatek mt2716 firmware, mt2735 firmware, mt2737 firmware +53 more +55 more In Modem, there is a possible system crash due to a missing bounds check. This could lead to... CVE-2026-20527 Fix available 5.3 MediumOctober 5, 2026
• mediatek mt2716 firmware, mt2735 firmware, mt2737 firmware +53 more +55 more In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead... CVE-2026-20526 Fix available 7.1 HighOctober 5, 2026
• mediatek mt2716 firmware, mt2735 firmware, mt2737 firmware +55 more +57 more In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead... CVE-2026-20520 Fix available 7.5 HighOctober 5, 2026
• mediatek mt2716 firmware, mt2735 firmware, mt2737 firmware +55 more +57 more In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead... CVE-2026-20519 Fix available 7.5 HighOctober 5, 2026
• mediatek mt2735 firmware, mt6833 firmware, mt6853 firmware +17 more +19 more In Modem, there is a possible system crash due to a missing bounds check. This could lead to... CVE-2026-20504 Fix available 5.3 MediumSeptember 1, 2026
• mediatek mt2716 firmware, mt2735 firmware, mt2737 firmware +55 more +57 more In Modem, there is a possible system crash due to a missing bounds check. This could lead to... CVE-2026-20503 Fix available 5.3 MediumSeptember 1, 2026
• mediatek mt2735 firmware, mt6833 firmware, mt6853 firmware +17 more +19 more In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead... CVE-2026-20479 Fix available 7.5 HighAugust 3, 2026
• mediatek mt2735 firmware, mt2737 firmware, mt6833 firmware +49 more +51 more In Modem, there is a possible system crash due to incorrect error handling. This could lead to... CVE-2026-20450 Fix available 6.5 MediumMay 4, 2026
• mediatek mt2735 firmware, mt2737 firmware, mt6739 firmware +66 more +68 more In Modem, there is a possible system crash due to a heap buffer overflow. This could lead to... CVE-2026-20449 Fix available 6.5 MediumMay 4, 2026
• mediatek mt2735 firmware, mt2737 firmware, mt6813 firmware +60 more +62 more In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead... CVE-2026-20433 Fix available 8.8 HighApril 7, 2026
• mediatek mt2735 firmware, mt2737 firmware, mt6779 firmware +56 more +58 more In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead... CVE-2026-20432 Fix available 8.0 HighApril 7, 2026
• mediatek mt2735 firmware, mt2737 firmware, mt6739 firmware +83 more +85 more In Modem, there is a possible system crash due to improper input validation. This could lead to... CVE-2025-20659 6.5 MediumApril 7, 2025
• mediatek mt2735, mt6833, mt6853 +19 more +21 more In Modem, there is a possible system crash due to a missing bounds check. This could lead to... CVE-2024-20094 Fix available 7.5 HighOctober 1, 2024
• mediatek mt2735, mt2737, mt6833 +31 more +33 more In Modem, there is a possible memory corruption due to a missing bounds check. This could lead to... CVE-2024-20082 Fix available 9.8 CriticalAugust 1, 2024
• google android, linuxfoundation yocto, mediatek mt2735 +37 more +39 more In gnss service, there is a possible out of bounds write due to improper input validation. This... CVE-2024-20081 6.7 MediumJuly 1, 2024
• google android, linuxfoundation yocto, mediatek mt2735 +36 more +38 more In gnss service, there is a possible escalation of privilege due to improper certificate... CVE-2024-20080 9.8 CriticalJuly 1, 2024
• mediatek mt6833, mt6853, mt6855 +15 more +17 more In modem, there is a possible selection of less-secure algorithm during the VoWiFi IKE due to a... CVE-2024-20069 Fix available 6.5 MediumJune 1, 2024
• google android, mediatek mt6580, mt6761 +27 more +29 more In wlan service, there is a possible out of bounds write due to improper input validation. This... CVE-2024-20064 7.8 HighMay 6, 2024
• google android, linux kernel, linuxfoundation yocto +48 more +50 more In wlan firmware, there is a possible out of bounds write due to improper input validation. This... CVE-2024-20040 Fix available 8.8 HighApril 1, 2024
• mediatek mt2735, mt6297, mt6833 +19 more +21 more In Modem NL1, there is a possible system crash due to an improper input validation. This could... CVE-2024-20003 Fix available 7.5 HighFebruary 1, 2024
• mediatek mt2735, mt2737, mt6297 +34 more +36 more In 5G Modem, there is a possible system crash due to improper error handling. This could lead to... CVE-2023-32845 7.5 HighDecember 4, 2023
• mediatek lr12a, mt2731, mt2735 +66 more +68 more In modem CCCI, there is a possible out of bounds write due to a missing bounds check. This could... CVE-2023-32840 6.5 MediumNovember 6, 2023
• google android, linuxfoundation yocto, mediatek iot yocto +15 more +17 more In apusys, there is a possible out of bounds write due to an integer overflow. This could lead to... CVE-2023-32829 6.7 MediumOctober 2, 2023
• google android, mediatek iot yocto, mt6771 +15 more +17 more In vpu, there is a possible out of bounds write due to an integer overflow. This could lead to... CVE-2023-32828 6.7 MediumOctober 2, 2023
• google android, mediatek mt6580, mt6739 +29 more +31 more In rpmb , there is a possible double free due to improper locking. This could lead to local... CVE-2023-32824 6.7 MediumOctober 2, 2023
• google android, mediatek mt6580, mt6739 +29 more +31 more In rpmb , there is a possible memory corruption due to a missing bounds check. This could lead to... CVE-2023-32823 6.7 MediumOctober 2, 2023
• google android, mediatek mt2713, mt6739 +43 more +45 more In ftm, there is a possible out of bounds write due to a missing bounds check. This could lead to... CVE-2023-32822 6.7 MediumOctober 2, 2023
• google android, linux kernel, linuxfoundation yocto +41 more +43 more In wlan firmware, there is a possible firmware assertion due to improper input handling. This... CVE-2023-32820 Fix available 7.5 HighOctober 1, 2023
• mediatek lr11, lr12a, lr13 +92 more +94 more In CDMA PPP protocol, there is a possible out of bounds write due to a missing bounds check. This... CVE-2023-20819 Fix available 9.8 CriticalOctober 1, 2023
• google android, linuxfoundation yocto, mediatek mt2735 +38 more +40 more In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to... CVE-2023-20832 6.7 MediumSeptember 4, 2023
• google android, linuxfoundation yocto, mediatek mt2735 +37 more +39 more In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to... CVE-2023-20831 6.7 MediumSeptember 4, 2023
• google android, linuxfoundation yocto, mediatek mt2713 +40 more +42 more In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to... CVE-2023-20830 6.7 MediumSeptember 4, 2023
• google android, linuxfoundation yocto, mediatek mt2735 +37 more +39 more In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to... CVE-2023-20829 6.7 MediumSeptember 4, 2023
• google android, linuxfoundation yocto, mediatek mt2735 +37 more +39 more In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to... CVE-2023-20828 6.7 MediumSeptember 4, 2023
• google android, mediatek mt6761, mt6762 +30 more +32 more In ims service, there is a possible memory corruption due to a race condition. This could lead to... CVE-2023-20827 6.4 MediumSeptember 4, 2023
• google android, mediatek mt6883, mt6885 +12 more +14 more In netdagent, there is a possible out of bounds write due to a missing bounds check. This could... CVE-2023-20822 6.7 MediumSeptember 4, 2023
• google android, linuxfoundation yocto, mediatek mt2713 +51 more +53 more In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead... CVE-2023-20821 6.7 MediumSeptember 4, 2023
• google android, mediatek mt6580, mt6739 +23 more +25 more In wlan service, there is a possible out of bounds read due to improper input validation. This... CVE-2023-20818 4.4 MediumAugust 7, 2023
• google android, mediatek mt6580, mt6739 +23 more +25 more In wlan service, there is a possible out of bounds write due to improper input validation. This... CVE-2023-20816 6.7 MediumAugust 7, 2023
• google android, mediatek mt6580, mt6739 +23 more +25 more In wlan service, there is a possible out of bounds write due to improper input validation. This... CVE-2023-20815 6.7 MediumAugust 7, 2023
• google android, mediatek mt6580, mt6739 +23 more +25 more In wlan service, there is a possible out of bounds write due to improper input validation. This... CVE-2023-20814 6.7 MediumAugust 7, 2023
• google android, mediatek mt6739, mt6761 +33 more +35 more In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to... CVE-2023-20795 6.7 MediumAugust 7, 2023