CveMateVulnerability intelligence

Mediatek, Inc. vulnerabilities

640 vulnerabilities

Known vulnerabilities in Mediatek, Inc. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 293 products.

Products

50 of 293

Mediatek Chipset174 vulnerabilities
Mt6890, Mt7615, Mt7622, Mt7663, Mt7915, Mt7916, Mt7981, Mt798626 vulnerabilities
Mt6879, Mt6895, Mt698312 vulnerabilities
Mt8167, Mt8175, Mt8183, Mt8362A, Mt8365, Mt838511 vulnerabilities
Mt7603, Mt7610, Mt7612, Mt7613, Mt7615, Mt7620, Mt7622, Mt7628, Mt7629, Mt7915, Mt7916, Mt7986, Mt89818 vulnerabilities
En7528, En75807 vulnerabilities
Mt6580, Mt6739, Mt6761, Mt6765, Mt6768, Mt6779, Mt6781, Mt6833, Mt6853, Mt6853T, Mt6855, Mt6873, Mt6875, Mt6877, Mt6879, Mt6883, Mt6885, Mt6886, Mt6889, Mt6891, Mt6893, Mt6895, Mt6983, Mt69856 vulnerabilities
Mt6762, Mt6765, Mt6833, Mt6879, Mt6883, Mt6885, Mt6983, Mt8167, Mt8168, Mt8188, Mt8321, Mt8765, Mt8766, Mt8768, Mt8781, Mt8786, Mt8788, Mt8789, Mt8791T, Mt8797, Mt87986 vulnerabilities
Mt6833, Mt6853, Mt6855, Mt6873, Mt6877, Mt6879, Mt6883, Mt6885, Mt6889, Mt6893, Mt6895, Mt6983, Mt8791, Mt87976 vulnerabilities
Mt6890, Mt7915, Mt7916, Mt7981, Mt79866 vulnerabilities
Mt7902, Mt7921, Mt7922, Mt7925, Mt79275 vulnerabilities
Mt2713, Mt6879, Mt6895, Mt6983, Mt8188, Mt8195, Mt8395, Mt86734 vulnerabilities
Mt2713, Mt6895, Mt6897, Mt6983, Mt8188, Mt8195, Mt8395, Mt87814 vulnerabilities
Mt6739, Mt6757, Mt6761, Mt6763, Mt6765, Mt6768, Mt6771, Mt6779, Mt6785, Mt6833, Mt6853, Mt6873, Mt6877, Mt6885, Mt6893, Mt8163, Mt8167, Mt8168, Mt85124 vulnerabilities
Mt6761, Mt6765, Mt6768, Mt6779, Mt6785, Mt6853, Mt6873, Mt6885, Mt8385, Mt8666, Mt8667, Mt8766, Mt8768, Mt8781, Mt8788, Mt87894 vulnerabilities
Mt6761, Mt6765, Mt6768, Mt6779, Mt6785, Mt8766, Mt8768, Mt87894 vulnerabilities
Mt6765, Mt6768, Mt6833, Mt6853, Mt6873, Mt6877, Mt6885, Mt6893, Mt8188, Mt81954 vulnerabilities
Mt6781, Mt6785, Mt6833, Mt6853, Mt6853T, Mt6873, Mt6877, Mt6883, Mt6885, Mt6889, Mt6891, Mt6893, Mt8185, Mt8789, Mt8791, Mt87974 vulnerabilities
Mt6853, Mt6853T, Mt6873, Mt6875, Mt6877, Mt6879, Mt6883, Mt6885, Mt6889, Mt6891, Mt6893, Mt8183, Mt81954 vulnerabilities
Mt6895, Mt6897, Mt6983, Mt8188, Mt8195, Mt8395, Mt87814 vulnerabilities
Mt7902, Mt7920, Mt7921, Mt7922, Mt7925, Mt79274 vulnerabilities
Mt99724 vulnerabilities
Mt2713, Mt6895, Mt6897, Mt6983, Mt8188, Mt8195, Mt8395, Mt86733 vulnerabilities
Mt6580, Mt6735, Mt6739, Mt6761, Mt6763, Mt6765, Mt6768, Mt6771, Mt6779, Mt6781, Mt6785, Mt6789, Mt6833, Mt6853, Mt6855, Mt6873, Mt6885, Mt6893, Mt6895, Mt6983, Mt8167, Mt8168, Mt8666, Mt86753 vulnerabilities
Mt6761, Mt6763, Mt6765, Mt6768, Mt6771, Mt6779, Mt6785, Mt6853, Mt6873, Mt68853 vulnerabilities
Mt6761, Mt6765, Mt6768, Mt6771, Mt6779, Mt6781, Mt6785, Mt6833, Mt6853, Mt6875, Mt6877, Mt6879, Mt6885, Mt6893, Mt6895, Mt69833 vulnerabilities
Mt6765, Mt6768, Mt6833, Mt6879, Mt6883, Mt6885, Mt6889, Mt6893, Mt6983, Mt6985, Mt8188, Mt8195, Mt8797, Mt87983 vulnerabilities
Mt6768, Mt6769, Mt6779, Mt6781, Mt6785, Mt6789, Mt6833, Mt6853, Mt6853T, Mt6873, Mt6875, Mt6877, Mt6883, Mt6885, Mt6889, Mt6891, Mt6893, Mt8168, Mt8365, Mt83953 vulnerabilities
Mt6789, Mt6855, Mt8185, Mt8195, Mt8365, Mt8395, Mt8781, Mt8786, Mt8789, Mt8791, Mt87973 vulnerabilities
Mt6833, Mt6853, Mt6873, Mt6877, Mt6879, Mt6885, Mt6893, Mt6895, Mt6983, Mt8185, Mt8321, Mt8385, Mt8532, Mt8666, Mt8675, Mt8765, Mt8766, Mt8768, Mt8786, Mt8788, Mt8789, Mt8791, Mt87973 vulnerabilities
Mt6833, Mt6853, Mt6873, Mt6877, Mt6885, Mt68933 vulnerabilities
Mt6853, Mt6853T, Mt6873, Mt6875, Mt6877, Mt6883, Mt6885, Mt6889, Mt6891, Mt6893, Mt9636, Mt9638, Mt96663 vulnerabilities
Mt6879, Mt6895, Mt6983, Mt8188, Mt8195, Mt8395, Mt87813 vulnerabilities
Mt6879, Mt6895, Mt6983, Mt8321, Mt8765, Mt8766, Mt8768, Mt8781, Mt8786, Mt8788, Mt8789, Mt8791T, Mt87973 vulnerabilities
Mt6890, Mt7603, Mt7615, Mt7622, Mt7915, Mt7916, Mt7981, Mt79863 vulnerabilities
Mt2718, Mt2737, Mt6835, Mt6878, Mt6886, Mt6897, Mt6899, Mt6982, Mt6985, Mt6986, Mt6986D, Mt6989, Mt6990, Mt6991, Mt8676, Mt8678, Mt8755, Mt88932 vulnerabilities
Mt2731, Mt6739, Mt6761, Mt6762, Mt6763, Mt6765, Mt6767, Mt6768, Mt6769, Mt6771, Mt8666, Mt8667, Mt8765, Mt8766, Mt8768, Mt8781, Mt8786, Mt87882 vulnerabilities
Mt2735, Mt6297, Mt6833, Mt6853, Mt6855, Mt6873, Mt6875, Mt6875T, Mt6877, Mt6880, Mt6883, Mt6885, Mt6889, Mt6890, Mt6891, Mt6893, Mt8675, Mt8791, Mt8791T, Mt87972 vulnerabilities
Mt2737, Mt6781, Mt6789, Mt6835, Mt6855, Mt6878, Mt6879, Mt6880, Mt6886, Mt6890, Mt6895, Mt6897, Mt6980, Mt6983, Mt6985, Mt6989, Mt6990, Mt8370, Mt8390, Mt8676, Mt86782 vulnerabilities
Mt5816, Mt5835, Mt6885, Mt6893, Mt9900, Mt9901, Mt9950, Mt9969, Mt9970, Mt99802 vulnerabilities
Mt6580, Mt6739, Mt6761, Mt6765, Mt6768, Mt6781, Mt6789, Mt6833, Mt6835, Mt6853, Mt6855, Mt6877, Mt6879, Mt6883, Mt6885, Mt6886, Mt6889, Mt6893, Mt6895, Mt6983, Mt6985, Mt6989, Mt8188, Mt8370, Mt83902 vulnerabilities
Mt6739, Mt6761, Mt6765, Mt6768, Mt6771, Mt6779, Mt6781, Mt6785, Mt6833, Mt6853, Mt6873, Mt6877, Mt6883, Mt8167, Mt8167S, Mt8168, Mt8321, Mt8362A, Mt83652 vulnerabilities
Mt6739, Mt6768, Mt6771, Mt6781, Mt6785, Mt6833, Mt6853, Mt6853T, Mt6873, Mt6877, Mt6883, Mt6885, Mt6889, Mt6893, Mt8786, Mt8789, Mt87972 vulnerabilities
Mt6739, Mt8167, Mt8168, Mt8321, Mt8365, Mt8385, Mt8666, Mt8765, Mt87882 vulnerabilities
Mt6739, Mt8167, Mt8321, Mt8365, Mt8385, Mt8666, Mt8765, Mt87882 vulnerabilities
Mt6761, Mt6762, Mt6768, Mt6769, Mt6779, Mt6781, Mt6785, Mt6789, Mt6833, Mt6853, Mt6853T, Mt6873, Mt6875, Mt6877, Mt6883, Mt6885, Mt6889, Mt6891, Mt6893, Mt8185, Mt8786, Mt8789, Mt8791, Mt87972 vulnerabilities
Mt6761, Mt6765, Mt6768, Mt6779, Mt6781, Mt6785, Mt6789, Mt6833, Mt6853, Mt6855, Mt6873, Mt6877, Mt6879, Mt6883, Mt6885, Mt6889, Mt6893, Mt6895, Mt6983, Mt8168, Mt8365, Mt86752 vulnerabilities
Mt6765, Mt6768, Mt6779, Mt6785, Mt8385, Mt8666, Mt8667, Mt8766, Mt8768, Mt8781, Mt8788, Mt87892 vulnerabilities
Mt6771, Mt6779, Mt6781, Mt6785, Mt6833, Mt6853, Mt6873, Mt6885, Mt6893, Mt8788, Mt87972 vulnerabilities
Mt6789, Mt6833, Mt6853, Mt6855, Mt6873, Mt6875, Mt6877, Mt6879, Mt6883, Mt6885, Mt6891, Mt6893, Mt6895, Mt6983, Mt8781, Mt8791, Mt8791T, Mt87972 vulnerabilities

CVE-2021-31577mediatek, inc.en7528, en7580+23y ago06-02-2023 00:00

In Boa, there is a possible escalation of privilege due to a missing permission check. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID: OSBNB00123241.CVE-2021-31575mediatek, inc.en7528, en7580+23y ago06-02-2023 00:00

In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID: OSBNB00123234.CVE-2021-31578mediatek, inc.en7528, en7580+23y ago06-02-2023 00:00

In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID: OSBNB00123241.CVE-2021-31574mediatek, inc.en7528, en7580+23y ago06-02-2023 00:00

In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID: OSBNB00123234.CVE-2021-31573mediatek, inc.en7528, en7580+23y ago06-02-2023 00:00

In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID: OSBNB00123234.CVE-2021-31576mediatek, inc.en7528, en7580+23y ago06-02-2023 00:00

In Boa, there is a possible information disclosure due to a missing permission check. This could lead to remote information disclosure to a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID: OSBNB00123241.CVE-2025-20656googleandroid+201y ago07-04-2025 03:14

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09625423; Issue ID: MSV-3033.CVE-2025-20650googleandroid+41y ago03-03-2025 02:25

In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291294; Issue ID: MSV-2061.CVE-2025-20749googleandroid+111mo ago04-11-2025 06:20

In charger, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09915493; Issue ID: MSV-3800.CVE-2025-20715mediatek, inc.mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986+21y ago14-10-2025 09:11

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00421152; Issue ID: MSV-3731.CVE-2025-20676mediatek, inc.mt7902, mt7921, mt7922, mt7925, mt7927+11y ago02-06-2025 02:29

In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412240; Issue ID: MSV-3293.CVE-2025-20649mediatek, inc.mt6880, mt6890, mt6980, mt6990, mt7663, mt7902, mt7925, mt7927, mt7961+21y ago03-03-2025 02:25

In Bluetooth Stack SW, there is a possible information disclosure due to a missing permission check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00396437; Issue ID: MSV-2184.CVE-2025-20673mediatek, inc.mt7902, mt7921, mt7922, mt7925, mt7927+51y ago02-06-2025 02:29

In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413200; Issue ID: MSV-3304.CVE-2025-20798googleandroid+19mo ago06-01-2026 01:46

In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10315812; Issue ID: MSV-5533.CVE-2025-20748mediatek, inc.mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986+211mo ago04-11-2025 06:20

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00432679; Issue ID: MSV-3950.CVE-2025-20633mediatek, inc.mt7603, mt7615, mt7622, mt7915+11y ago03-02-2025 03:23

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00400889; Issue ID: MSV-2491.CVE-2025-20648googleandroid+11y ago03-03-2025 02:25

In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09456673; Issue ID: MSV-2584.CVE-2025-20805googleandroid+19mo ago06-01-2026 01:47

In dpe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10114696; Issue ID: MSV-4480.CVE-2025-20762mediatek, inc.mediatek chipset+19mo ago06-01-2026 01:46

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01685181; Issue ID: MSV-4760.CVE-2025-20685mediatek, inc.mt6890, mt7915, mt7916, mt7981, mt7986+21y ago08-07-2025 02:00

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416226; Issue ID: MSV-3409.