CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 10:10 UTC )
This week: 5,469 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,469 Show in the list Critical, last 7 days 357 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product mediatek:mt8189_firmware . Show all products
24 CVEs, showing 1 to 24
CVE Severity Title Published CVE-2026-20473 Medium 6.0 In display, there is a possible memory corruption due to use after free. Assigned by MediaTek
Aug 3, 2026 CVE-2026-20474 Medium 6.0 In display, there is a possible escalation of privilege due to a race condition. Assigned by MediaTek
Aug 3, 2026 CVE-2026-20475 Medium 6.0 In display, there is a possible out of bounds write due to a missing bounds check. Assigned by MediaTek
Aug 3, 2026 CVE-2026-20477 Medium 6.0 In display, there is a possible out of bounds write due to a missing bounds check. Assigned by MediaTek
Aug 3, 2026 CVE-2026-20484 Medium 4.4 In TFA, there is a possible information disclosure due to a missing permission check. Assigned by MediaTek
Aug 3, 2026 CVE-2026-20488 Medium 4.4 In display, there is a possible information disclosure due to a missing bounds check. Assigned by MediaTek
Aug 3, 2026 CVE-2026-20489 Medium 4.4 In display, there is a possible information disclosure due to an integer overflow. Assigned by MediaTek
Aug 3, 2026 CVE-2026-20501 High 8.4 In vdec, there is a possible out of bounds write due to a heap buffer overflow. Assigned by MediaTek
Sep 7, 2026 CVE-2026-20502 High 8.4 In vdec, there is a possible out of bounds write due to a missing bounds check. Assigned by MediaTek
Sep 7, 2026 CVE-2026-20586 High 8.8 In vdec, there is a possible out of bounds write due to a missing bounds check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20589 Medium 6.7 In venc, there is a possible out of bounds write due to type confusion. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20521 High 8.4 In Video HAL, there is a possible escalation of privilege due to a missing bounds check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20522 High 8.4 In neuropilot, there is a possible out of bounds write due to a missing bounds check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20523 High 8.4 In neuropilot, there is a possible out of bounds write due to a missing bounds check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20579 Medium 6.7 In vdec, there is a possible out of bounds write due to type confusion. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20587 Medium 6.7 In mtee, there is a possible escalation of privilege due to type confusion. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20588 Medium 6.7 In mtee, there is a possible escalation of privilege due to a missing bounds check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20544 Medium 6.8 In meta, there is a possible out of bounds write due to a missing bounds check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20529 Medium 6.7 In battery, there is a possible out of bounds write due to a missing bounds check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20530 Medium 6.7 In display, there is a possible out of bounds write due to a missing bounds check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20535 Medium 6.7 In aidl, there is a possible escalation of privilege due to a missing permission check. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20536 Medium 6.7 In aidl, there is a possible memory corruption due to use after free. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20537 Medium 6.7 In aidl, there is a possible memory corruption due to use after free. Assigned by MediaTek
Oct 5, 2026 CVE-2026-20542 Medium 6.7 In apusys, there is a possible memory corruption due to use after free. Assigned by MediaTek
Oct 5, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
