CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,463 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,463
Show in the list
Critical, last 7 days
357
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product mediatek:chipset. Show all products

83 CVEs, showing 1 to 50Page 1 of 2Next
CVESeverityTitlePublished
CVE-2026-20464Medium 6.5In hevc decoder, there is a possible out of bounds write due to an integer overflow.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20465High 8.1In wlan AP driver, there is a possible out of bounds write due to a missing bounds check.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20466Medium 6.1In sec boot, there is a possible escalation of privilege due to a heap buffer overflow.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20467Medium 6.0In apusys, there is a possible escalation of privilege due to a missing bounds check.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20468Medium 6.0In apusys, there is a possible escalation of privilege due to a confused deputy.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20469Medium 6.0In trusted_mem, there is a possible escalation of privilege due to improper input validation.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20471Medium 4.6In DA, there is a possible out of bounds write due to a missing bounds check.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20472Medium 4.4In TFA, there is a possible out of bounds write due to a missing bounds check.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20473Medium 6.0In display, there is a possible memory corruption due to use after free.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20474Medium 6.0In display, there is a possible escalation of privilege due to a race condition.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20475Medium 6.0In display, there is a possible out of bounds write due to a missing bounds check.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20476Medium 5.5In ccci, there is a possible out of bounds read due to a missing bounds check.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20477Medium 6.0In display, there is a possible out of bounds write due to a missing bounds check.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20478Medium 5.5In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20479High 7.5In Modem, there is a possible out of bounds read due to a missing bounds check.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20480Medium 5.5In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20497Medium 6.0In geniezone, there is a possible out of bounds write due to a missing bounds check.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20481Medium 6.0In geniezone, there is a possible out of bounds write due to a missing bounds check.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20482Medium 6.5In wlan STA FW, there is a possible system becoming unresponsive due to logging.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20483High 7.7In Telephony, there is a possible escalation of privilege due to a missing permission check.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20470Medium 6.2In Telephony, there is a possible information disclosure due to a missing permission check.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20484Medium 4.4In TFA, there is a possible information disclosure due to a missing permission check.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20485Medium 6.0In HFRP, there is a possible out of bounds write due to a missing bounds check.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20486Medium 6.7In imgsensor, there is a possible application crash due to incorrect error handling.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20488Medium 4.4In display, there is a possible information disclosure due to a missing bounds check.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20489Medium 4.4In display, there is a possible information disclosure due to an integer overflow.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20490Medium 4.4In ccci, there is a possible out of bounds read due to a missing bounds check.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20491Medium 5.5In med, there is a possible out of bounds write due to an incorrect bounds check.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20492Medium 5.5In Audio HAL, there is a possible system becoming unresponsive due to a race condition.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20493Medium 4.4In wifi, there is a possible out of bounds write due to a missing bounds check.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20494Medium 5.5In wifi, there is a possible out of bounds read due to a missing bounds check.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20495High 7.8In Bluetooth driver, there is a possible permission bypass due to a missing permission check.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20496Medium 4.4In geniezone, there is a possible out of bounds read due to a missing bounds check.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20498Medium 6.0In geniezone, there is a possible escalation of privilege due to a missing permission check.
Assigned by MediaTek
Aug 3, 2026
CVE-2026-20500Medium 5.5In Modem, there is a possible system crash due to improper input validation.
Assigned by MediaTek
Sep 7, 2026
CVE-2026-20501High 8.4In vdec, there is a possible out of bounds write due to a heap buffer overflow.
Assigned by MediaTek
Sep 7, 2026
CVE-2026-20502High 8.4In vdec, there is a possible out of bounds write due to a missing bounds check.
Assigned by MediaTek
Sep 7, 2026
CVE-2026-20503Medium 5.3In Modem, there is a possible system crash due to a missing bounds check.
Assigned by MediaTek
Sep 7, 2026
CVE-2026-20504Medium 5.3In Modem, there is a possible system crash due to a missing bounds check.
Assigned by MediaTek
Sep 7, 2026
CVE-2026-20516Medium 5.5In MiracastService, there is a possible escalation of privilege due to a confused deputy.
Assigned by MediaTek
Sep 7, 2026
CVE-2026-20506Medium 6.7In Audio HAL, there is a possible escalation of privilege due to use after free.
Assigned by MediaTek
Sep 7, 2026
CVE-2026-20507Medium 6.7In Audio HAL, there is a possible escalation of privilege due to use after free.
Assigned by MediaTek
Sep 7, 2026
CVE-2026-20508Medium 6.7In Power HAL, there is a possible escalation of privilege due to type confusion.
Assigned by MediaTek
Sep 7, 2026
CVE-2026-20509Medium 6.7In Power HAL, there is a possible out of bounds write due to a missing bounds check.
Assigned by MediaTek
Sep 7, 2026
CVE-2026-20510Medium 6.7In camera middleware, there is a possible escalation of privilege due to double free.
Assigned by MediaTek
Sep 7, 2026
CVE-2026-20511Medium 6.7In SurfaceFlinger, there is a possible memory corruption due to use after free.
Assigned by MediaTek
Sep 7, 2026
CVE-2026-20512Medium 6.7In Audio HAL, there is a possible escalation of privilege due to improper input validation.
Assigned by MediaTek
Sep 7, 2026
CVE-2026-20513Medium 4.4In Audio HAL, there is a possible information disclosure due to improper input validation.
Assigned by MediaTek
Sep 7, 2026
CVE-2026-20514Medium 4.4In Audio HAL, there is a possible information disclosure due to a missing permission check.
Assigned by MediaTek
Sep 7, 2026
CVE-2026-20515Medium 5.5In gpu, there is a possible system crash due to use after free.
Assigned by MediaTek
Sep 7, 2026
Page 1 of 2Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.