CveMateVulnerability intelligence

Mediatek Mt6993 vulnerabilities

44 vulnerabilities

Known vulnerabilities in Mediatek Mt6993, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2026-20527mediatek, inc.mediatek chipset+5515d ago05-10-2026 01:39

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01864925 / MOLY01210562; Issue ID: MSV-8303.CVE-2026-20486mediatek, inc.mediatek chipset+112mo ago03-08-2026 02:05

In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11012302; Issue ID: MSV-7833.CVE-2026-20477mediatek, inc.mediatek chipset+102mo ago03-08-2026 02:05

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11009963; Issue ID: MSV-7658.CVE-2026-20489mediatek, inc.mediatek chipset+172mo ago03-08-2026 02:05

In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004274; Issue ID: MSV-7749.CVE-2026-20539mediatek, inc.mediatek chipset+8315d ago05-10-2026 01:40

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8913.CVE-2026-20488mediatek, inc.mediatek chipset+172mo ago03-08-2026 02:05

In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7757.CVE-2026-20526mediatek, inc.mediatek chipset+5515d ago05-10-2026 01:39

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01898195; Issue ID: MSV-8906.CVE-2026-20521mediatek, inc.mediatek chipset+4815d ago05-10-2026 01:39

In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571.CVE-2026-20483mediatek, inc.mediatek chipset+352mo ago03-08-2026 02:05

In Telephony, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11087526; Issue ID: MSV-8243.CVE-2026-20500mediatek, inc.mediatek chipset+221mo ago07-09-2026 01:57

In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01810811; Issue ID: MSV-9232.CVE-2026-20519mediatek, inc.mediatek chipset+5715d ago05-10-2026 01:39

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01778993; Issue ID: MSV-8898.CVE-2026-20502mediatek, inc.mediatek chipset+531mo ago07-09-2026 01:57

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9196.CVE-2026-20534mediatek, inc.mediatek chipset+8315d ago05-10-2026 01:40

In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01797547; Issue ID: MSV-9155.CVE-2026-20449mediatek, inc.mediatek chipset+685mo ago04-05-2026 05:41

In Modem, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01760138; Issue ID: MSV-6148.CVE-2026-20543mediatek, inc.mediatek chipset+8315d ago05-10-2026 01:40

In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01645293; Issue ID: MSV-6761.CVE-2026-20431mediatek, inc.mediatek chipset+196mo ago07-04-2026 03:25

In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01106496; Issue ID: MSV-4467.CVE-2026-20474mediatek, inc.mediatek chipset+172mo ago03-08-2026 02:05

In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019183; Issue ID: MSV-7758.CVE-2026-20450mediatek, inc.mediatek chipset+515mo ago04-05-2026 05:41

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01753620; Issue ID: MSV-6100.CVE-2026-20529mediatek, inc.mediatek chipset+2815d ago05-10-2026 01:40

In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11276677; Issue ID: MSV-9217.CVE-2026-20538mediatek, inc.mediatek chipset+8315d ago05-10-2026 01:40

In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8914.