MediaTek vulnerabilities
We track 224 vulnerabilities in MediaTek products across 60+ products. 224 are rated high or critical, and none are known to be exploited. The most recent was published on November 2, 2026.
Latest MediaTek vulnerabilities
- 7.8 High severity
MediaTek chipset: Use After Free
In cameraisp, there is a possible escalation of privilege due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10351676;
- 7.8 High severity
MediaTek chipset: Out-of-bounds Write
In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10
- 8.8 High severity
MediaTek chipset: Out-of-bounds Write
In wlan, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCN
- 9.3 Critical severity
MediaTek chipset: Out-of-bounds Write
In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00464377; Iss
- 7.5 High severity
MediaTek chipset: Improper Check for Unusual or Exceptional Conditions
In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is
- 7.0 High severity
MediaTek chipset: Concurrent Execution using Shared Resource with Improper Synchronization
In seninf, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10251210;
- 7.8 High severity
MediaTek chipset: Out-of-bounds Write
In mminfra, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS1
- 7.8 High severity
MediaTek chipset: Use After Free
In c2ps, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10274607; Issu
- 7.8 High severity
MediaTek chipset: Out-of-bounds Write
In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS1
- 7.8 High severity
MediaTek chipset: Out-of-bounds Write
In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS1
- 7.8 High severity
MediaTek chipset: Improper Validation of Specified Index, Position, or Offset in Input
In imgsys, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS103
- 7.8 High severity
MediaTek chipset: Out-of-bounds Write
In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: AL
- 7.8 High severity
MediaTek chipset: Use After Free
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10182914; I
- 7.8 High severity
MediaTek chipset: Use After Free
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10184061; I
- 7.0 High severity
MediaTek chipset: Use After Free
In display, there is a possible use after free due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10184084; Is
- 7.8 High severity
MediaTek chipset: Out-of-bounds Write
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS1
- 7.8 High severity
MT6739, MT6761, MT6765, MT6768, MT6781…: Out-of-bounds Read
In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10
- 7.8 High severity
MT2718, MT6739, MT6761, MT6765, MT6768…: Out-of-bounds Write
In display, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS1019
- 7.8 High severity
MT2718, MT6739, MT6761, MT6765, MT6768…: Use of Uninitialized Variable
In display, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS
- 7.8 High severity
MT6739, MT6761, MT6765, MT6768, MT6781…: Out-of-bounds Write
In smi, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10259
- 7.8 High severity
MT6833, MT6835, MT6853, MT6855, MT6877…: Out-of-bounds Write
In mmdvfs, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10
- 8.0 High severity
MT6890, MT7603, MT7615, MT7622, MT7915…: Out-of-bounds Write
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- 7.8 High severity
MT6890, MT7615, MT7622, MT7663, MT7915…: Out-of-bounds Write
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435343; Issue
- 7.8 High severity
MT6890, MT7615, MT7622, MT7663, MT7915…: Out-of-bounds Write
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435349; Issue
- 7.8 High severity
MT6890, MT7615, MT7622, MT7663, MT7915…: Out-of-bounds Write
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00441509; Issue
- 7.8 High severity
MT7902, MT7920, MT7921, MT7922, MT7925, MT7927: Out-of-bounds Write
In wlan STA driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00447115; Issu
- 8.1 High severity
MT2735, MT2737, MT6739, MT6761, MT6762…: Out-of-bounds Write
In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User i
- 7.5 High severity
MT2735, MT2737, MT6739, MT6761, MT6762…: Out-of-bounds Write
In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. Use
- 7.5 High severity
MT2735, MT2737, MT6739, MT6761, MT6762…: Out-of-bounds Write
In ims service, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed.
- 7.8 High severity
MT6835, MT6878, MT6886, MT6897, MT6899…: Out-of-bounds Write
In gnss driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID
- 7.8 High severity
MT6886, MT6897, MT6899, MT6985, MT6989…: Out-of-bounds Write
In imgsensor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALP
- 8.8 High severity
MT6890, MT7603, MT7615, MT7622, MT7915…: Out-of-bounds Write
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- 8.8 High severity
MT6890, MT7603, MT7615, MT7622, MT7915…: Out-of-bounds Write
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- 7.8 High severity
MT6890, MT7615, MT7622, MT7663, MT7915…: Out-of-bounds Write
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00419945; Issue
- 7.8 High severity
MT6890, MT7615, MT7622, MT7663, MT7915…: Out-of-bounds Write
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch
- 7.8 High severity
MT6890, MT7615, MT7622, MT7663, MT7915…: Out-of-bounds Write
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch
- 7.8 High severity
MT6890, MT7615, MT7622, MT7663, MT7915…: Out-of-bounds Write
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch
- 7.8 High severity
MT6890, MT7615, MT7622, MT7663, MT7915…: Out-of-bounds Write
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch
- 7.8 High severity
MT6890, MT7615, MT7622, MT7663, MT7915…: Out-of-bounds Write
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch
- 8.8 High severity
MT6990, MT7990, MT7991, MT7992, MT7993: Heap-based Buffer Overflow
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.