Mediatek vulnerabilities
319 vulnerabilities
Known vulnerabilities in Mediatek products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 199 products.
Products
50 of 199- Software Development Kit71 vulnerabilities
- Nr1565 vulnerabilities
- Nr1657 vulnerabilities
- Nr1748 vulnerabilities
- Mt699146 vulnerabilities
- Mt699344 vulnerabilities
- Mt866844 vulnerabilities
- Mt878143 vulnerabilities
- Mt867842 vulnerabilities
- Mt879341 vulnerabilities
- Mt791540 vulnerabilities
- Mt867639 vulnerabilities
- Mt689938 vulnerabilities
- Mt698938 vulnerabilities
- Mt761538 vulnerabilities
- Mt762238 vulnerabilities
- Mt879237 vulnerabilities
- Mt687836 vulnerabilities
- Mt761336 vulnerabilities
- Mt762836 vulnerabilities
- Mt762936 vulnerabilities
- Mt685535 vulnerabilities
- Mt687735 vulnerabilities
- Mt8791T34 vulnerabilities
- Mt891034 vulnerabilities
- Mt689733 vulnerabilities
- Mt683531 vulnerabilities
- Mt683329 vulnerabilities
- Mt685329 vulnerabilities
- Mt689329 vulnerabilities
- Mt689529 vulnerabilities
- Mt698329 vulnerabilities
- Mt698529 vulnerabilities
- Mt678928 vulnerabilities
- Mt687928 vulnerabilities
- Mt688328 vulnerabilities
- Mt688528 vulnerabilities
- Mt688628 vulnerabilities
- Mt688928 vulnerabilities
- Mt689027 vulnerabilities
- Mt676826 vulnerabilities
- Mt818826 vulnerabilities
- Mt877526 vulnerabilities
- Mt876825 vulnerabilities
- Iot Yocto24 vulnerabilities
- Mt698824 vulnerabilities
- Mt699024 vulnerabilities
- Mt818924 vulnerabilities
- Mt879724 vulnerabilities
- Mt273523 vulnerabilities
CVE-2018-12041mediatekawus036nh_firmware
EPSS score1.08%
An issue was discovered on the MediaTek AWUS036NH wireless USB adapter through 5.1.25.0. Attackers can remotely deny service by sending specially constructed 802.11 frames.CVE-2021-40148mediateklr11+4EPSS score0.74%
In Modem EMM, there is a possible information disclosure due to a missing data encryption. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00716585; Issue ID: ALPS05886933.CVE-2021-41789mediatekmt7615_firmware+1EPSS score0.61%
In wifi driver, there is a possible system crash due to a missing validation check. This could lead to remote denial of service from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20190426015; Issue ID: GN20190426015.CVE-2021-41788mediatekmt7603e_firmware+7EPSS score1.82%
MediaTek microchips, as used in NETGEAR devices through 2021-12-13 and other devices, mishandle attempts at Wi-Fi authentication flooding. (Affected Chipsets MT7603E, MT7612, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0).CVE-2021-31577mediatek, inc.en7528, en7580+2EPSS score1.15%
In Boa, there is a possible escalation of privilege due to a missing permission check. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID: OSBNB00123241.CVE-2021-31575mediatek, inc.en7528, en7580+2EPSS score1.68%
In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID: OSBNB00123234.CVE-2021-31578mediatek, inc.en7528, en7580+2EPSS score1.28%
In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID: OSBNB00123241.CVE-2021-31574mediatek, inc.en7528, en7580+2EPSS score1.68%
In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID: OSBNB00123234.CVE-2021-31573mediatek, inc.en7528, en7580+2EPSS score1.68%
In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID: OSBNB00123234.CVE-2021-31576mediatek, inc.en7528, en7580+2EPSS score1.01%
In Boa, there is a possible information disclosure due to a missing permission check. This could lead to remote information disclosure to a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID: OSBNB00123241.CVE-2021-37572mediatekmt7603e_firmware+6EPSS score1.07%
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Missing authorization).CVE-2021-37569mediatekmt7603e_firmware+6EPSS score1.24%
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds write).CVE-2021-37567mediatekmt7603e_firmware+6EPSS score1.16%
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds read).CVE-2021-37566mediatekmt7603e_firmware+8EPSS score1.31%
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7610, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds write).CVE-2021-37565mediatekmt7603e_firmware+6EPSS score1.16%
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds read).CVE-2021-37562mediatekmt7603e_firmware+9EPSS score1.16%
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds read).CVE-2021-37568mediatekmt7603e_firmware+6EPSS score1.24%
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds write).CVE-2021-37561mediatekmt7603e_firmware+9EPSS score1.24%
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds write).CVE-2021-37583mediatekmt7603e_firmware+6EPSS score1.40%
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds write).CVE-2021-37563mediatekmt7603e_firmware+9EPSS score1.24%
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds write).