Mediatek Mt6899 Firmware vulnerabilities

• mediatek mt2716 firmware, mt2735 firmware, mt2737 firmware +81 more +83 more In Modem, there is a possible information disclosure due to a logic error. This could lead to... CVE-2026-20543 5.5 MediumOctober 5, 2026
• mediatek mt2718 firmware, mt6878 firmware, mt6897 firmware +17 more +19 more In apusys, there is a possible memory corruption due to use after free. This could lead to local... CVE-2026-20542 6.7 MediumOctober 5, 2026
• mediatek mt2716 firmware, mt2735 firmware, mt2737 firmware +81 more +83 more In Modem, there is a possible out of bounds read due to a missing permission check. This could... CVE-2026-20541 5.3 MediumOctober 5, 2026
• mediatek mt2716 firmware, mt2735 firmware, mt2737 firmware +81 more +83 more In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead... CVE-2026-20540 5.3 MediumOctober 5, 2026
• mediatek mt2716 firmware, mt2735 firmware, mt2737 firmware +81 more +83 more In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead... CVE-2026-20539 5.3 MediumOctober 5, 2026
• mediatek mt2716 firmware, mt2735 firmware, mt2737 firmware +81 more +83 more In Modem, there is a possible out of bounds read due to a missing permission check. This could... CVE-2026-20538 5.3 MediumOctober 5, 2026
• mediatek mt6878 firmware, mt6881 firmware, mt6899 firmware +9 more +11 more In aidl, there is a possible memory corruption due to use after free. This could lead to local... CVE-2026-20537 6.7 MediumOctober 5, 2026
• mediatek mt6878 firmware, mt6881 firmware, mt6899 firmware +11 more +13 more In aidl, there is a possible memory corruption due to use after free. This could lead to local... CVE-2026-20536 6.7 MediumOctober 5, 2026
• mediatek mt6878 firmware, mt6881 firmware, mt6899 firmware +10 more +12 more In aidl, there is a possible escalation of privilege due to a missing permission check. This... CVE-2026-20535 6.7 MediumOctober 5, 2026
• mediatek mt2716 firmware, mt2735 firmware, mt2737 firmware +81 more +83 more In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could... CVE-2026-20534 5.3 MediumOctober 5, 2026
• mediatek mt6739 firmware, mt6761 firmware, mt6765 firmware +31 more +33 more In display, there is a possible escalation of privilege due to an integer overflow. This could... CVE-2026-20533 6.7 MediumOctober 5, 2026
• mediatek mt6899 firmware, mt6993 firmware, mt8668 firmware +3 more +5 more In apu, there is a possible application crash due to double free. This could lead to local denial... CVE-2026-20532 6.2 MediumOctober 5, 2026
• mediatek mt6899 firmware, mt6993 firmware, mt8668 firmware +4 more +6 more In apu, there is a possible memory corruption due to use after free. This could lead to local... CVE-2026-20531 8.4 HighOctober 5, 2026
• mediatek mt6739 firmware, mt6761 firmware, mt6765 firmware +57 more +59 more In meta, there is a possible out of bounds write due to a missing bounds check. This could lead... CVE-2026-20544 6.8 MediumOctober 5, 2026
• mediatek mt2716 firmware, mt2735 firmware, mt2737 firmware +53 more +55 more In Modem, there is a possible system crash due to a missing bounds check. This could lead to... CVE-2026-20527 Fix available 5.3 MediumOctober 5, 2026
• mediatek mt2716 firmware, mt2735 firmware, mt2737 firmware +53 more +55 more In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead... CVE-2026-20526 Fix available 7.1 HighOctober 5, 2026
• mediatek mt2716 firmware, mt6835 firmware, mt6858 firmware +20 more +22 more In Modem, there is a possible system crash due to improper input validation. This could lead to... CVE-2026-20525 Fix available 5.3 MediumOctober 5, 2026
• mediatek mt6899 firmware, mt6993 firmware, mt8668 firmware +4 more +6 more In apu, there is a possible memory corruption due to improper input validation. This could lead... CVE-2026-20524 Fix available 8.4 HighOctober 5, 2026
• mediatek mt2718 firmware, mt6768 firmware, mt6769 firmware +46 more +48 more In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This... CVE-2026-20521 Fix available 8.4 HighOctober 5, 2026
• mediatek mt2716 firmware, mt2735 firmware, mt2737 firmware +55 more +57 more In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead... CVE-2026-20520 Fix available 7.5 HighOctober 5, 2026
• mediatek mt2716 firmware, mt2735 firmware, mt2737 firmware +55 more +57 more In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead... CVE-2026-20519 Fix available 7.5 HighOctober 5, 2026
• mediatek mt2716 firmware, mt2735 firmware, mt2737 firmware +55 more +57 more In Modem, there is a possible system crash due to a missing bounds check. This could lead to... CVE-2026-20503 Fix available 5.3 MediumSeptember 1, 2026
• mediatek mt2718 firmware, mt6580 firmware, mt6739 firmware +51 more +53 more In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead... CVE-2026-20502 8.4 HighSeptember 1, 2026
• mediatek mt2718 firmware, mt6580 firmware, mt6739 firmware +51 more +53 more In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead... CVE-2026-20501 8.4 HighSeptember 1, 2026
• mediatek mt2716 firmware, mt6835 firmware, mt6858 firmware +20 more +22 more In Modem, there is a possible system crash due to improper input validation. This could lead to... CVE-2026-20500 Fix available 5.0 MediumSeptember 1, 2026
• mediatek mt6739 firmware, mt6761 firmware, mt6765 firmware +37 more +39 more In TFA, there is a possible information disclosure due to a missing permission check. This could... CVE-2026-20484 4.4 MediumAugust 3, 2026
• mediatek mt6739 firmware, mt6761 firmware, mt6765 firmware +34 more +36 more In geniezone, there is a possible out of bounds write due to a missing bounds check. This could... CVE-2026-20455 7.8 HighJune 1, 2026
• mediatek mt6739 firmware, mt6761 firmware, mt6765 firmware +34 more +36 more In geniezone, there is a possible out of bounds write due to a race condition. This could lead to... CVE-2026-20454 6.4 MediumJune 1, 2026
• mediatek mt6739 firmware, mt6761 firmware, mt6765 firmware +34 more +36 more In geniezone, there is a possible out of bounds write due to a missing bounds check. This could... CVE-2026-20453 Fix available 6.7 MediumJune 1, 2026
• mediatek mt2718 firmware, mt6899 firmware, mt6985 firmware +30 more +32 more In slbc, there is a possible out of bounds write due to type confusion. This could lead to local... CVE-2026-20451 6.7 MediumMay 4, 2026
• mediatek mt2735 firmware, mt2737 firmware, mt6833 firmware +49 more +51 more In Modem, there is a possible system crash due to incorrect error handling. This could lead to... CVE-2026-20450 Fix available 6.5 MediumMay 4, 2026
• mediatek mt2735 firmware, mt2737 firmware, mt6739 firmware +66 more +68 more In Modem, there is a possible system crash due to a heap buffer overflow. This could lead to... CVE-2026-20449 Fix available 6.5 MediumMay 4, 2026
• mediatek mt6765 firmware, mt6768 firmware, mt6789 firmware +20 more +22 more In geniezone, there is a possible escalation of privilege due to a missing permission check. This... CVE-2026-20448 Fix available 6.7 MediumMay 4, 2026
• mediatek mt6768 firmware, mt6789 firmware, mt6877 firmware +15 more +17 more In geniezone, there is a possible escalation of privilege due to a missing bounds check. This... CVE-2026-20447 Fix available 6.7 MediumMay 4, 2026
• mediatek mt2735 firmware, mt2737 firmware, mt6813 firmware +60 more +62 more In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead... CVE-2026-20433 Fix available 8.8 HighApril 7, 2026
• mediatek mt2735 firmware, mt2737 firmware, mt6779 firmware +56 more +58 more In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead... CVE-2026-20432 Fix available 8.0 HighApril 7, 2026
• mediatek mt6813 firmware, mt6815 firmware, mt6835 firmware +17 more +19 more In Modem, there is a possible system crash due to a logic error. This could lead to remote denial... CVE-2026-20431 Fix available 6.5 MediumApril 7, 2026
• mediatek mt2735 firmware, mt2737 firmware, mt6739 firmware +83 more +85 more In Modem, there is a possible system crash due to improper input validation. This could lead to... CVE-2025-20659 6.5 MediumApril 7, 2025