CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 10:23 UTC )
This week: 5,468 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,468 Show in the list Critical, last 7 days 357 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product mediatek:mt6881_firmware . Show all products
23 CVEs, showing 1 to 23
CVE Severity Title Published CVE-2026-20500 Medium 5.5 In Modem, there is a possible system crash due to improper input validation. Assigned by MediaTek
Sep 7, 2026 CVE-2026-20501 High 8.4 In vdec, there is a possible out of bounds write due to a heap buffer overflow. Assigned by MediaTek
Sep 7, 2026 CVE-2026-20502 High 8.4 In vdec, there is a possible out of bounds write due to a missing bounds check. Assigned by MediaTek
Sep 7, 2026 CVE-2026-20503 Medium 5.3 In Modem, there is a possible system crash due to a missing bounds check. Assigned by MediaTek
Sep 7, 2026 CVE-2026-20519 High 7.5 In Modem, there is a possible out of bounds write due to a missing bounds check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20520 High 7.5 In Modem, there is a possible out of bounds write due to a missing bounds check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20521 High 8.4 In Video HAL, there is a possible escalation of privilege due to a missing bounds check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20522 High 8.4 In neuropilot, there is a possible out of bounds write due to a missing bounds check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20523 High 8.4 In neuropilot, there is a possible out of bounds write due to a missing bounds check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20525 Medium 5.3 In Modem, there is a possible system crash due to improper input validation. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20526 High 7.5 In Modem, there is a possible out of bounds write due to a missing bounds check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20527 Medium 5.3 In Modem, there is a possible system crash due to a missing bounds check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20544 Medium 6.8 In meta, there is a possible out of bounds write due to a missing bounds check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20529 Medium 6.7 In battery, there is a possible out of bounds write due to a missing bounds check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20534 Medium 5.3 In Modem, there is a possible out of bounds read due to an incorrect bounds check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20535 Medium 6.7 In aidl, there is a possible escalation of privilege due to a missing permission check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20536 Medium 6.7 In aidl, there is a possible memory corruption due to use after free. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20537 Medium 6.7 In aidl, there is a possible memory corruption due to use after free. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20538 Medium 5.3 In Modem, there is a possible out of bounds read due to a missing permission check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20539 Medium 5.3 In Modem, there is a possible out of bounds read due to a missing bounds check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20540 Medium 5.3 In Modem, there is a possible out of bounds read due to a missing bounds check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20541 Medium 5.3 In Modem, there is a possible out of bounds read due to a missing permission check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20543 Medium 5.5 In Modem, there is a possible information disclosure due to a logic error. Assigned by MediaTek
Oct 5, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
