MediaTek vulnerabilities
We track 224 vulnerabilities in MediaTek products across 60+ products. 224 are rated high or critical, and none are known to be exploited. The most recent was published on November 2, 2026.
Latest MediaTek vulnerabilities
- 8.8 High severity
MT6890, MT7916, MT7981, MT7986: Out-of-bounds Write
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- 8.8 High severity
MT6890, MT7915, MT7916, MT7981, MT7986: Integer Overflow or Wraparound
In wlan AP driver, there is a possible out of bounds write due to an integer overflow. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch
- 8.8 High severity
MT6890, MT7915, MT7916, MT7981, MT7986: Buffer Copy without Checking Size of Input
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- 8.8 High severity
MT2735, MT2737, MT6813, MT6815, MT6833…: Out-of-bounds Write
In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. Use
- 7.8 High severity
MT6899, MT6989, MT6991, MT8676, MT8678: Use After Free
In mbrain, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09924624; Is
- 7.8 High severity
MT2718, MT2735, MT6739, MT6761, MT6765…: Use After Free
In monitor_hang, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS099890
- 8.0 High severity
MT6813, MT6835, MT6835T, MT6878, MT6878M…: Out-of-bounds Write
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User i
- 8.8 High severity
MT6890, MT7915, MT7916, MT7981, MT7986: Heap-based Buffer Overflow
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:
- 8.8 High severity
MT6890, MT7915, MT7916, MT7981, MT7986: Heap-based Buffer Overflow
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:
- 9.8 Critical severity
MT7615, MT7622, MT7663: Out-of-bounds Write
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416939; Issue
- 9.8 Critical severity
MT6890, MT7615, MT7622, MT7663, MT7915…: Out-of-bounds Write
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416938; Issue
- 9.8 Critical severity
MT6890, MT7615, MT7622, MT7663, MT7915…: Out-of-bounds Write
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416937; Issue
- 9.8 Critical severity
MT6890, MT7615, MT7622, MT7663, MT7915: Out-of-bounds Write
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416936; Issue
- 9.8 Critical severity
MT7902, MT7920, MT7921, MT7922, MT7925, MT7927: Heap-based Buffer Overflow
In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418044; Iss
- 9.8 Critical severity
MT6890, MT6990, MT7915, MT7916, MT7981…: Incorrect Authorization
In wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID
- 9.8 Critical severity
MT7902, MT7921, MT7922, MT7925, MT7927: Heap-based Buffer Overflow
In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412257; Iss
- 7.0 High severity
MT2718, MT6878, MT6897, MT6899, MT6989…: Out-of-bounds Write
In thermal, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS0969859
- 7.8 High severity
MT6878, MT6897, MT6899, MT6989, MT6991…: Out-of-bounds Write
In scp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09625
- 7.5 High severity
MT2735, MT2737, MT6739, MT6761, MT6762…: Inadequate Encryption Strength
In Modem, there is a possible information disclosure due to incorrect error handling. This could lead to remote information disclosure, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. Us
- 7.5 High severity
MT2735, MT6833, MT6833P, MT6853, MT6853T…: Reachable Assertion
In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is
- 7.5 High severity
MT7915, MT7916, MT7981, MT7986, MT7990, MT7992: Uncaught Exception
In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Pa
- 7.5 High severity
MT7915, MT7916, MT7981, MT7986: Uncaught Exception
In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Pa
- 9.8 Critical severity
MT6890, MT7622, MT7915, MT7916, MT7981, MT7986: Out-of-bounds Write
In wlan service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00406897; Issue
- 9.8 Critical severity
MT6890, MT7915, MT7916, MT7981, MT7986: Out-of-bounds Write
In wlan AP FW, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389074;
- 7.8 High severity
MT6765, MT6768, MT6833, MT6835, MT6853…: Out-of-bounds Write
In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: AL
- 7.5 High severity
MT7981, MT7986: Improper Check for Unusual or Exceptional Conditions
In network HW, there is a possible system hang due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00399035; Issue ID: MSV-238
- 9.8 Critical severity
MT2737, MT6813, MT6835, MT6835T, MT6878…: Out-of-bounds Write
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interactio
- 8.8 High severity
MT7603, MT7615, MT7622, MT7915: Out-of-bounds Write
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:
- 7.8 High severity
MT7615, MT7622, MT7663, MT7915, MT7916…: Out-of-bounds Write
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR003971
- 7.8 High severity
MT7615, MT7622, MT7663, MT7915, MT7916…: Out-of-bounds Write
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR003971
- 8.8 High severity
MT2735, MT6767, MT6768, MT6769, MT6769K…: Out-of-bounds Write
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interactio
- 7.5 High severity
MT2737, MT6989, MT6991, MT7925, MT8365…: Missing Critical Step in Authentication
In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS089904
- 7.5 High severity
MT2735, MT2737, MT6767, MT6768, MT6769…: Deserialization of Untrusted Data
In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01412526; Issue ID: MSV-2018.
- 7.5 High severity
MT2735, MT2737, MT6767, MT6768, MT6769…: Improper Validation of Specified Quantity in Input
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01231341 / MOLY01263331 / MO
- 9.8 Critical severity
MT3603, MT6835, MT6878, MT6886, MT6897…: Out-of-bounds Write
In wlan STA FW, there is a possible out of bounds write due to improper input validation. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WC
- 8.1 High severity
MT2737, MT3603, MT6835, MT6878, MT6886…: Out-of-bounds Write
In wlan STA driver, there is a possible out of bounds write due to improper input validation. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID
- 7.5 High severity
MT3605, MT6985, MT6989, MT6990, MT7925…: Out-of-bounds Read
In wlan driver, there is a possible out of bound read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998291; Is
- 7.5 High severity
MT6890, MT7622, MT7915, MT7916, MT7981, MT7986: Uncaught Exception
In wlan driver, there is a possible client disconnection due to improper handling of exceptional conditions. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:
- 7.5 High severity
MT6580, MT6739, MT6761, MT6765, MT6768…: Out-of-bounds Read
In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09289881; Issue ID: M
- 7.5 High severity
MT6580, MT6739, MT6761, MT6765, MT6768…: Out-of-bounds Read
In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09289881; Issue ID: M