Mediatek Mt8186 vulnerabilities

10 vulnerabilities

Known vulnerabilities in Mediatek Mt8186, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.7CVE-2026-20587mediatek, inc.mediatek chipset+25
EPSS score
0.11%
In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9608.
8.4CVE-2026-20521mediatek, inc.mediatek chipset+48
EPSS score
0.13%
In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571.
8.4CVE-2026-20502mediatek, inc.mediatek chipset+53
EPSS score
0.13%
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9196.
6.7CVE-2026-20529mediatek, inc.mediatek chipset+28
EPSS score
0.11%
In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11276677; Issue ID: MSV-9217.
6.7CVE-2026-20589mediatek, inc.mediatek chipset+25
EPSS score
0.11%
In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9606.
6.7CVE-2026-20451mediatek, inc.mediatek chipset+32
EPSS score
0.15%
In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10828685; Issue ID: MSV-6504.
8.4CVE-2026-20501mediatek, inc.mediatek chipset+53
EPSS score
0.13%
In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9197.
8.8CVE-2026-20586mediatek, inc.mediatek chipset+25
EPSS score
0.38%
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614.
6.7CVE-2026-20579mediatek, inc.mediatek chipset+25
EPSS score
0.11%
In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9800.
6.7CVE-2026-20588mediatek, inc.mediatek chipset+25
EPSS score
0.11%
In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9607.