Mediatek Mt8766R vulnerabilities
7 vulnerabilities
Known vulnerabilities in Mediatek Mt8766R, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-20539mediatek, inc.mediatek chipset+83
EPSS score0.18%
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8913.CVE-2026-20483mediatek, inc.mediatek chipset+35EPSS score0.17%
In Telephony, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11087526; Issue ID: MSV-8243.CVE-2026-20534mediatek, inc.mediatek chipset+83EPSS score0.18%
In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01797547; Issue ID: MSV-9155.CVE-2026-20543mediatek, inc.mediatek chipset+83EPSS score0.12%
In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01645293; Issue ID: MSV-6761.CVE-2026-20538mediatek, inc.mediatek chipset+83EPSS score0.18%
In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8914.CVE-2026-20540mediatek, inc.mediatek chipset+83EPSS score0.18%
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8912.CVE-2026-20541mediatek, inc.mediatek chipset+83EPSS score0.18%
In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8911.