MediaTek vulnerabilities
We track 224 vulnerabilities in MediaTek products across 60+ products. 224 are rated high or critical, and none are known to be exploited. The most recent was published on November 2, 2026.
Latest MediaTek vulnerabilities
- 8.8 High severity
MT6761, MT6762, MT6765, MT6768, MT6769…: Use After Free
In WIFI Firmware, there is a possible memory corruption due to a use after free. This could lead to remote escalation of privilege, when devices are connecting to the attacker-controllable Wi-Fi hotspot, with no additional execution privileges needed. User int
- 7.8 High severity
MT6580, MT6735, MT6737, MT6739, MT6750…: Integer Overflow or Wraparound
In ion, there is a possible use after free due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06371108; Issue ID: ALPS06371
- 8.4 High severity
MT6580, MT6735, MT6737, MT6739, MT6750…: Improper Handling of Exceptional Conditions
In ion, there is a possible use after free due to incorrect error handling. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06366069; Issue ID: ALPS
- 7.0 High severity
MT6580, MT6735, MT6737, MT6739, MT6750…: Time-of-check Time-of-use (TOCTOU) Race Condition
In ion, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06399915; Issue ID: ALPS06399901
- 7.8 High severity
MT6580, MT6739, MT6761, MT6762, MT6765…: Out-of-bounds Write
In aee daemon, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06296442; Issue ID
- 7.8 High severity
MT6731, MT6732, MT6735, MT6737, MT6739…: Missing Authorization
In telephony, there is a possible way to disable receiving SMS messages due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch I
- 7.8 High severity
MT6580, MT6731, MT6739, MT6761, MT6762…: Improper Handling of Exceptional Conditions
In aee driver, there is a possible reference count mistake due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06209201; Issue
- 7.8 High severity
MT6731, MT6732, MT6735, MT6737, MT6739…: Missing Authorization
In telephony, there is a possible way to disable receiving emergency broadcasts due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- 7.8 High severity
MT6580, MT6739, MT6750, MT6761, MT6762…: Missing Authorization
In ims service, there is a possible AT command injection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219083
- 7.8 High severity
MT6731, MT6732, MT6735, MT6737, MT6739…: Missing Authorization
In ims service, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219
- 7.8 High severity
MT5816, MT5835, MT6885, MT6893, MT9900…: Out-of-bounds Write
In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05917502; I
- 7.8 High severity
MT5816, MT5835, MT6885, MT6893, MT9900…: Out-of-bounds Write
In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05917489; I
- 7.8 High severity
MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385: Use After Free
In Bluetooth, there is a possible service crash due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126820; Issue ID: ALPS061
- 7.8 High severity
MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385: Use After Free
In Bluetooth, there is a possible service crash due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126814; Issue ID: ALPS061
- 7.8 High severity
MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385: Missing Authorization
In Bluetooth, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0614817
- 7.8 High severity
MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385: Missing Authorization
In Bluetooth, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0610859
- 7.8 High severity
MT6735, MT6737, MT6739, MT6755, MT6757…: Out-of-bounds Write
In power_hal_manager_service, there is a possible permission bypass due to a stack-based buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID
- 7.8 High severity
MT6580, MT6582E, MT6582H, MT6582T, MT6582W…: Use After Free
In fb driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05850708; Issue ID: ALP
- 7.8 High severity
MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385: Out-of-bounds Write
In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06198663; Issue
- 7.8 High severity
MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385: Out-of-bounds Write
In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126826; Issue
- 7.8 High severity
MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385: Out-of-bounds Write
In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126827; Issue
- 7.8 High severity
MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385: Out-of-bounds Write
In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126832; Issue
- 7.8 High severity
MT6580, MT6739, MT6750, MT6761, MT6762…: Missing Authorization
In system service, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219064
- 7.8 High severity
MT6580, MT6739, MT6750, MT6750S, MT6753…: Integer Overflow or Wraparound
In mdp driver, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05836478; Issue ID: