MediaTek

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any MediaTek product.

RSS Feeds for MediaTek security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in MediaTek products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by MediaTek Sorted by Most Security Vulnerabilities since 2018

MediaTek Mt698990 vulnerabilities

MediaTek Mt685550 vulnerabilities

MediaTek Mt689742 vulnerabilities

MediaTek Mt698540 vulnerabilities

MediaTek Mt687939 vulnerabilities

MediaTek Mt683538 vulnerabilities

MediaTek Mt698337 vulnerabilities

MediaTek Mt687837 vulnerabilities

MediaTek Mt689537 vulnerabilities

MediaTek Mt688637 vulnerabilities

MediaTek Software Development Kit31 vulnerabilities

MediaTek Mt819630 vulnerabilities

MediaTek Mt678128 vulnerabilities

MediaTek Mt867326 vulnerabilities

MediaTek Nr1626 vulnerabilities

MediaTek Mt678923 vulnerabilities

MediaTek Nr1722 vulnerabilities

MediaTek Nr1520 vulnerabilities

MediaTek Mt878119 vulnerabilities

MediaTek Iot Yocto16 vulnerabilities

MediaTek Lr12a9 vulnerabilities

MediaTek Lr138 vulnerabilities

MediaTek Mt83906 vulnerabilities

MediaTek Mt83705 vulnerabilities

MediaTek Nr17r4 vulnerabilities

MediaTek Nbiot Sdk4 vulnerabilities

MediaTek Mt99724 vulnerabilities

MediaTek Mt87981 vulnerability

MediaTek Mt79251 vulnerability

MediaTek Mt79271 vulnerability

MediaTek Mt8188t1 vulnerability

MediaTek Software Package1 vulnerability

MediaTek Mt83211 vulnerability

MediaTek Mt87861 vulnerability

MediaTek Mt83951 vulnerability

MediaTek Mt86671 vulnerability

MediaTek Mt87971 vulnerability

MediaTek Mt86761 vulnerability

MediaTek Mt8791t1 vulnerability

MediaTek Mt87891 vulnerability

MediaTek Mt86781 vulnerability

MediaTek Mt87651 vulnerability

MediaTek Mt87661 vulnerability

MediaTek Mt87881 vulnerability

MediaTek Mt87681 vulnerability

MediaTek Mt68531 vulnerability

MediaTek Lr111 vulnerability

MediaTek Lr151 vulnerability

MediaTek Mt27131 vulnerability

MediaTek Mt27181 vulnerability

MediaTek Mt67391 vulnerability

MediaTek Mt67531 vulnerability

MediaTek Mt67571 vulnerability

MediaTek Mt67611 vulnerability

MediaTek Mt67621 vulnerability

MediaTek Mt67631 vulnerability

MediaTek Mt67651 vulnerability

MediaTek Mt67681 vulnerability

MediaTek Mt67691 vulnerability

MediaTek Mt68331 vulnerability

MediaTek Mt79221 vulnerability

MediaTek Mt68731 vulnerability

MediaTek Mt68751 vulnerability

MediaTek Mt68771 vulnerability

MediaTek Mt68801 vulnerability

MediaTek Mt68811 vulnerability

MediaTek Mt68831 vulnerability

MediaTek Mt68851 vulnerability

MediaTek Mt68891 vulnerability

MediaTek Mt68901 vulnerability

MediaTek Mt68931 vulnerability

MediaTek Mt69901 vulnerability

MediaTek Mt79021 vulnerability

MediaTek Mt79201 vulnerability

MediaTek Mt79211 vulnerability

By the Year

In 2026 there have been 139 vulnerabilities in MediaTek with an average score of 6.5 out of ten. Last year, in 2025 MediaTek had 123 security vulnerabilities published. That is, 16 more vulnerabilities have already been reported in 2026 as compared to last year. Last year, the average CVE base score was greater by 0.41

Year	Vulnerabilities	Average Score
2026	139	6.47
2025	123	6.88
2024	32	7.58
2023	18	6.78
2022	2	8.65

It may take a day or so for new MediaTek vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent MediaTek Security Vulnerabilities

CVE	Date	Vulnerability
CVE-2026-20518	Sep 07, 2026	GenieZone local info disclosure via missing bounds check In geniezone, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS10867524 / ALPS10876355; Issue ID: MSV-6674.
CVE-2026-20517	Sep 07, 2026	GenieZone Use-After-Free Priv Escalation (CVE-2026-20517) In geniezone, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10900510; Issue ID: MSV-6781.
CVE-2026-20515	Sep 07, 2026	MediaTek GPU Driver AUF Crash (Local Disclosure) In gpu, there is a possible system crash due to use after free. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11122991; Issue ID: MSV-8132.
CVE-2026-20514	Sep 07, 2026	MediaTek Audio HAL Info Disclosure via Missing Permission Check In Audio HAL, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087632; Issue ID: MSV-8244.
CVE-2026-20513	Sep 07, 2026	Audio HAL Local Info Disclosure via Improper Input Validation (MediaTek) In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087533; Issue ID: MSV-8245.
CVE-2026-20512	Sep 07, 2026	MediaTek Audio HAL PrivEsc via Improper Input Validation In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087540; Issue ID: MSV-8246.
CVE-2026-20511	Sep 07, 2026	Android SurfaceFlinger UAF Memory Corruption In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11123860; Issue ID: MSV-8890.
CVE-2026-20510	Sep 07, 2026	MediatTek Camera Middleware Double-Free PrivEsc In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11134622; Issue ID: MSV-8894.
CVE-2026-20509	Sep 07, 2026	MediaTek Power HAL OOB Write Escalates Privileges In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11165543; Issue ID: MSV-9011.
CVE-2026-20508	Sep 07, 2026	MediaTek Power HAL Privilege Escalation via Type Confusion In Power HAL, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11165543; Issue ID: MSV-9012.
CVE-2026-20507	Sep 07, 2026	MediaTek Audio HAL Use-After-Free Priv Escalation In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11191981; Issue ID: MSV-9125.
CVE-2026-20506	Sep 07, 2026	MediaTek Audio HAL Use-After-Free Priv Escalation In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11191981; Issue ID: MSV-9126.
CVE-2026-20516	Sep 07, 2026	MediaTek MiracastService Privilege Escalation (CVE-2026-20516) In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11060069 / DTV04881615; Issue ID: MSV-7882.
CVE-2026-20504	Sep 07, 2026	MediaTek Modem R-DoS via Bounds Check in Modem Firmware In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00755024; Issue ID: MSV-7865.
CVE-2026-20503	Sep 07, 2026	MediaTek Modem RDV Remote DoS via Bounds Check Overflow In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01371002; Issue ID: MSV-9020.
CVE-2026-20502	Sep 07, 2026	MediaTek vdec Out-of-Bounds Write Priv Esc Vulnerability In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9196.
CVE-2026-20501	Sep 07, 2026	MediaTek vdec Heap Buffer Overflow Enables Local Priv Escalation In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9197.
CVE-2026-20500	Sep 07, 2026	MediaTek Modem: Improper Input Validation Causing Local DoS In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01810811; Issue ID: MSV-9232.
CVE-2026-20498	Aug 03, 2026	MediaTek Chipset: Privilege Escalation via geniezone Permission Bypass In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10900493; Issue ID: MSV-6765.
CVE-2026-20495	Aug 03, 2026	Local Privilege Escalation: MediaTek Bluetooth Driver CVE-2026-20495 In Bluetooth driver, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00488300; Issue ID: MSV-7296.
CVE-2026-20493	Aug 03, 2026	MediaTek WiFi Chipset OOB Write Enables Local DoS In wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: BORA00154903; Issue ID: MSV-7575.
CVE-2026-20492	Aug 03, 2026	MediaTek Audio HAL race condition leads to local DoS In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10960026 (Note: For MT6880, MT6890, MT6990, MT6988) / AUTO00851250 (Note: For MT2735, MT2737); Issue ID: MSV-7583.
CVE-2026-20489	Aug 03, 2026	MediaTek Display Integer Overflow Enables Local Info Disclosure In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004274; Issue ID: MSV-7749.
CVE-2026-20488	Aug 03, 2026	MediaTek chipset bounds check bug CVE-2026-20488 In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7757.
CVE-2026-20486	Aug 03, 2026	MediaTek chipset: imgsensor crash leads to privilege escalation In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11012302; Issue ID: MSV-7833.
CVE-2026-20485	Aug 03, 2026	MediaTek MT6993 HFRP OOB Write Enables Priv Escalation In HFRP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11049569; Issue ID: MSV-7931.
CVE-2026-20484	Aug 03, 2026	MediaTek TFA Info Disclosure via Missing Permission Check In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11053160; Issue ID: MSV-8004.
CVE-2026-20470	Aug 03, 2026	MediaTek Telephony Local Info Disclosure via Missing Permission Check In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11086431; Issue ID: MSV-8189.
CVE-2026-20483	Aug 03, 2026	MediaTek Telephony Escalation of Privilege via Missing Permission In Telephony, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11087526; Issue ID: MSV-8243.
CVE-2026-20482	Aug 03, 2026	MediaTek WLAN STA DoS via excessive logging In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote (proximal/adjacent) denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00486814; Issue ID: MSV-6824.
CVE-2026-20481	Aug 03, 2026	OOB Write in MediaTek GenieZone Enables Local PrivEsc In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10965373; Issue ID: MSV-6935.
CVE-2026-20497	Aug 03, 2026	OOB write in geniezone enables local privilege escalation on MediaTek In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10965550 / ALPS11393405; Issue ID: MSV-6941.
CVE-2026-20480	Aug 03, 2026	MediaTek Audio HAL Heap Overflow Enables Local DoS In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10960023 (Note: For MT6880, MT6890, MT6980D, MT6988, MT6990) / AUTO00851189 (Note: For MT2735, MT3737); Issue ID: MSV-7586.
CVE-2026-20479	Aug 03, 2026	MediaTek Modem OoB Read Remote DoS via Rogue Base Station In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00741071; Issue ID: MSV-7620.
CVE-2026-20478	Aug 03, 2026	MediaTek Audio HAL Heap Buffer Overflow, OOB Write, DoS (CVE-2026-20478) In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10981454 (Note: For MT6880, MT6890, MT6988, MT6990) / AUTO00851293 (Note: For MT2735, MT2737); Issue ID: MSV-7638.
CVE-2026-20477	Aug 03, 2026	MediaTek chipset out-of-bounds write leads to local privilege escalation In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11009963; Issue ID: MSV-7658.
CVE-2026-20476	Aug 03, 2026	Out-of-Bounds Read in MediaTek CCCI Leading to Local DoS In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10981532; Issue ID: MSV-7660.
CVE-2026-20475	Aug 03, 2026	MediaTek Display OOB Write Enables Local Priv Escalation In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748.
CVE-2026-20474	Aug 03, 2026	Race Condition Enables Local Priv Escalation in MediaTek Chipset In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019183; Issue ID: MSV-7758.
CVE-2026-20473	Aug 03, 2026	MediaTek chipset Use-After-Free leading to local privilege escalation In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019722; Issue ID: MSV-7759.
CVE-2026-20472	Aug 03, 2026	MediaTek TFA OOB Write Local DoS (Sys Priv) In TFA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10991467; Issue ID: MSV-7764.
CVE-2026-20471	Aug 03, 2026	MediaTek Chipset OOB Write Vulnerability (CVE-2026-20471) In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10991588 (Note: For MT6880, MT6890, MT6990, MT6988, MT6986, MT6813) / AUTO00851171 (Note: For MT2735, MT2737); Issue ID: MSV-7790.
CVE-2026-20469	Aug 03, 2026	MediaTek chipset trusted_mem PrivEsc via Input Validation In trusted_mem, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: AUTO00834868; Issue ID: MSV-6533.
CVE-2026-20468	Aug 03, 2026	MediaTek chipset apusys local privilege escalation In apusys, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: AUTO00833804; Issue ID: MSV-6741.
CVE-2026-20467	Aug 03, 2026	MediaTek Chipset Priv Escalation via Bounds Check In apusys, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: AUTO00837766; Issue ID: MSV-6767.
CVE-2026-20466	Aug 03, 2026	MediaTek MCU: MT2737/MT6880/MT6890/MT6990 SecureBoot Heap Overflow PrivEsc In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: AUTO00845351 (Note: For MT2737) / ALPS11072643 (Note: For MT6880, MT6890, MT6990); Issue ID: MSV-6929.
CVE-2026-20465	Aug 03, 2026	MediaTek WLAN AP Driver OOB Write Escalation In wlan AP driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00489200; Issue ID: MSV-7834.
CVE-2026-20464	Aug 03, 2026	MediaTek HEVC Decoder OOB Write via Integer Overflow (CVE-2026-20464) In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11104718; Issue ID: MSV-8297.
CVE-2026-20463	Jul 01, 2026	MediaTek Modem Priv Escalation via Permission Bypass In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: MOLY01716533; Issue ID: MSV-6309.
CVE-2026-20462	Jul 01, 2026	MediaTek Telephony Heap Buffer Overflow (CVE-2026-20462) In Telephony, there is a possible memory corruption due to a heap buffer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11006447; Issue ID: MSV-7871.