CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 10:23 UTC )
This week: 5,468 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,468 Show in the list Critical, last 7 days 357 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product mediatek:mt6988_firmware . Show all products
24 CVEs, showing 1 to 24
CVE Severity Title Published CVE-2026-20449 Medium 6.5 In Modem, there is a possible system crash due to a heap buffer overflow. May 4, 2026 CVE-2026-20476 Medium 5.5 In ccci, there is a possible out of bounds read due to a missing bounds check. Assigned by MediaTek
Aug 3, 2026 CVE-2026-20478 Medium 5.5 In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. Assigned by MediaTek
Aug 3, 2026 CVE-2026-20480 Medium 5.5 In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. Assigned by MediaTek
Aug 3, 2026 CVE-2026-20484 Medium 4.4 In TFA, there is a possible information disclosure due to a missing permission check. Assigned by MediaTek
Aug 3, 2026 CVE-2026-20490 Medium 4.4 In ccci, there is a possible out of bounds read due to a missing bounds check. Assigned by MediaTek
Aug 3, 2026 CVE-2026-20491 Medium 5.5 In med, there is a possible out of bounds write due to an incorrect bounds check. Assigned by MediaTek
Aug 3, 2026 CVE-2026-20492 Medium 5.5 In Audio HAL, there is a possible system becoming unresponsive due to a race condition. Assigned by MediaTek
Aug 3, 2026 CVE-2026-20493 Medium 4.4 In wifi, there is a possible out of bounds write due to a missing bounds check. Assigned by MediaTek
Aug 3, 2026 CVE-2026-20494 Medium 5.5 In wifi, there is a possible out of bounds read due to a missing bounds check. Assigned by MediaTek
Aug 3, 2026 CVE-2026-20500 Medium 5.5 In Modem, there is a possible system crash due to improper input validation. Assigned by MediaTek
Sep 7, 2026 CVE-2026-20503 Medium 5.3 In Modem, there is a possible system crash due to a missing bounds check. Assigned by MediaTek
Sep 7, 2026 CVE-2026-20519 High 7.5 In Modem, there is a possible out of bounds write due to a missing bounds check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20520 High 7.5 In Modem, there is a possible out of bounds write due to a missing bounds check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20525 Medium 5.3 In Modem, there is a possible system crash due to improper input validation. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20526 High 7.5 In Modem, there is a possible out of bounds write due to a missing bounds check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20527 Medium 5.3 In Modem, there is a possible system crash due to a missing bounds check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20528 Medium 6.7 In ccci, there is a possible out of bounds write and read due to a missing bounds check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20534 Medium 5.3 In Modem, there is a possible out of bounds read due to an incorrect bounds check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20538 Medium 5.3 In Modem, there is a possible out of bounds read due to a missing permission check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20539 Medium 5.3 In Modem, there is a possible out of bounds read due to a missing bounds check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20540 Medium 5.3 In Modem, there is a possible out of bounds read due to a missing bounds check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20541 Medium 5.3 In Modem, there is a possible out of bounds read due to a missing permission check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20543 Medium 5.5 In Modem, there is a possible information disclosure due to a logic error. Assigned by MediaTek
Oct 5, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
