MediaTek

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any MediaTek product.

RSS Feeds for MediaTek security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in MediaTek products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by MediaTek Sorted by Most Security Vulnerabilities since 2018

MediaTek Mt698990 vulnerabilities

MediaTek Mt685550 vulnerabilities

MediaTek Mt689742 vulnerabilities

MediaTek Mt698540 vulnerabilities

MediaTek Mt687939 vulnerabilities

MediaTek Mt683538 vulnerabilities

MediaTek Mt698337 vulnerabilities

MediaTek Mt687837 vulnerabilities

MediaTek Mt689537 vulnerabilities

MediaTek Mt688637 vulnerabilities

MediaTek Software Development Kit31 vulnerabilities

MediaTek Mt819630 vulnerabilities

MediaTek Mt678128 vulnerabilities

MediaTek Mt867326 vulnerabilities

MediaTek Nr1626 vulnerabilities

MediaTek Mt678923 vulnerabilities

MediaTek Nr1722 vulnerabilities

MediaTek Nr1520 vulnerabilities

MediaTek Mt878119 vulnerabilities

MediaTek Iot Yocto16 vulnerabilities

MediaTek Lr12a9 vulnerabilities

MediaTek Lr138 vulnerabilities

MediaTek Mt83906 vulnerabilities

MediaTek Mt83705 vulnerabilities

MediaTek Nr17r4 vulnerabilities

MediaTek Nbiot Sdk4 vulnerabilities

MediaTek Mt99724 vulnerabilities

MediaTek Mt87981 vulnerability

MediaTek Mt79251 vulnerability

MediaTek Mt79271 vulnerability

MediaTek Mt8188t1 vulnerability

MediaTek Software Package1 vulnerability

MediaTek Mt83211 vulnerability

MediaTek Mt87861 vulnerability

MediaTek Mt83951 vulnerability

MediaTek Mt86671 vulnerability

MediaTek Mt87971 vulnerability

MediaTek Mt86761 vulnerability

MediaTek Mt8791t1 vulnerability

MediaTek Mt87891 vulnerability

MediaTek Mt86781 vulnerability

MediaTek Mt87651 vulnerability

MediaTek Mt87661 vulnerability

MediaTek Mt87881 vulnerability

MediaTek Mt87681 vulnerability

MediaTek Mt68531 vulnerability

MediaTek Lr111 vulnerability

MediaTek Lr151 vulnerability

MediaTek Mt27131 vulnerability

MediaTek Mt27181 vulnerability

MediaTek Mt67391 vulnerability

MediaTek Mt67531 vulnerability

MediaTek Mt67571 vulnerability

MediaTek Mt67611 vulnerability

MediaTek Mt67621 vulnerability

MediaTek Mt67631 vulnerability

MediaTek Mt67651 vulnerability

MediaTek Mt67681 vulnerability

MediaTek Mt67691 vulnerability

MediaTek Mt68331 vulnerability

MediaTek Mt79221 vulnerability

MediaTek Mt68731 vulnerability

MediaTek Mt68751 vulnerability

MediaTek Mt68771 vulnerability

MediaTek Mt68801 vulnerability

MediaTek Mt68811 vulnerability

MediaTek Mt68831 vulnerability

MediaTek Mt68851 vulnerability

MediaTek Mt68891 vulnerability

MediaTek Mt68901 vulnerability

MediaTek Mt68931 vulnerability

MediaTek Mt69901 vulnerability

MediaTek Mt79021 vulnerability

MediaTek Mt79201 vulnerability

MediaTek Mt79211 vulnerability

By the Year

In 2026 there have been 226 vulnerabilities in MediaTek with an average score of 6.5 out of ten. Last year, in 2025 MediaTek had 123 security vulnerabilities published. That is, 103 more vulnerabilities have already been reported in 2026 as compared to last year. Last year, the average CVE base score was greater by 0.42

Year	Vulnerabilities	Average Score
2026	226	6.46
2025	123	6.88
2024	32	7.58
2023	18	6.78
2022	2	8.65

It may take a day or so for new MediaTek vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent MediaTek Security Vulnerabilities

CVE	Date	Vulnerability
CVE-2026-68591	Nov 02, 2026	MediaTek Modem Privilege Escalation via Permission Bypass In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege (EoP) if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09608864 / ALPS09327759; Issue ID: MSV-2958.
CVE-2026-68590	Nov 02, 2026	MediaTek ip_stack OOB Read Remote DoS via Rogue Base Station In ip_stack, there is a possible out of bounds read due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01387180; Issue ID: MSV-5152.
CVE-2026-68589	Nov 02, 2026	Modem OOB Write PrivEsc (MediaTek) In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: MOLY01320076; Issue ID: MSV-6889.
CVE-2026-68588	Nov 02, 2026	MediaTek Modem Integer Overflow RDoS via Rogue Base Station In Modem, there is a possible way (for XXX) to XXXXX due to an integer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01334054 / MOLY01312486; Issue ID: MSV-7920.
CVE-2026-20600	Nov 02, 2026	MediaTek Modem Remote DoS via Logic Error In Modem, there is a possible application crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01416152; Issue ID: MSV-7924.
CVE-2026-20599	Nov 02, 2026	MediaTek Modem Local Priv Escalation via Missing Permission Check In Modem, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: MOLY01790985; Issue ID: MSV-8148.
CVE-2026-20598	Nov 02, 2026	MediaTek Modem OOB Read via Int Overflow Remote DoS In Modem, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01755742; Issue ID: MSV-8896.
CVE-2026-20597	Nov 02, 2026	MediaTek Modem OOB Read Remote DoS via Rogue Base Station In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01758223; Issue ID: MSV-8909.
CVE-2026-20596	Nov 02, 2026	MediaTek Modem OOB Read Leading to Remote DoS In Modem, there is a possible out of bounds read due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01758225; Issue ID: MSV-8910.
CVE-2026-20595	Nov 02, 2026	Neuropilot OOB Write Priv Esc (CVE-2026-20595) In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11263078; Issue ID: MSV-9001.
CVE-2026-20594	Nov 02, 2026	MediaTek Modem OOB Read (CVE-2026-20594) Enables Remote DoS In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01349680 / MOLY01369097; Issue ID: MSV-9364.
CVE-2026-20593	Nov 02, 2026	MediaTek Modem: Improper Input Validation Causes Remote DoS In Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01707455; Issue ID: MSV-9503.
CVE-2026-20592	Nov 02, 2026	MediaTek Modem Side-Channel Info Disclosure (CVE-2026-20592) In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: MOLY01744265; Issue ID: MSV-9505.
CVE-2026-20591	Nov 02, 2026	MediaTek GPU PDMA PrivEsc via Missing Permission Check In GPU pdma, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11365075; Issue ID: MSV-9546.
CVE-2026-20590	Nov 02, 2026	MediaTek Display Driver logic error: local DoS via system crash In display, there is a possible system crash due to a logic error. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11410704; Issue ID: MSV-9574.
CVE-2026-20585	Nov 02, 2026	MediaTek Modem OOB Write Privilege Escalation via Rogue BTS In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01338165; Issue ID: MSV-9660.
CVE-2026-20584	Nov 02, 2026	Memory Corruption in MediaTek USB Driver Enables Local Escalation In usb, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11411916; Issue ID: MSV-9746.
CVE-2026-20583	Nov 02, 2026	Use-After-Free in MediaTek USB Driver Kernel leads to DOS In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11411916; Issue ID: MSV-9747.
CVE-2026-20582	Nov 02, 2026	MediaTek USB Driver Double Free: Local Priv Escalation In usb, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11411924; Issue ID: MSV-9748.
CVE-2026-20581	Nov 02, 2026	MediaTek USB driver Use-After-Free leads to Local Priv Escalation In usb, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11411985; Issue ID: MSV-9750.
CVE-2026-20580	Nov 02, 2026	MediaTek USB Driver UAF leading to local DoS (CVE-2026-20580) In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11412004; Issue ID: MSV-9752.
CVE-2026-20578	Nov 02, 2026	MediaTek Modem Side-Channel Info Disclosure: Remote DoS via Rogue BS In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01879164; Issue ID: MSV-9846.
CVE-2026-20577	Nov 02, 2026	MediaTek Modem Permission Bypass -> Local DoS In Modem, there is a possible permission bypass due to a permissions bypass. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: MOLY01880753; Issue ID: MSV-9866.
CVE-2026-20576	Nov 02, 2026	Local Priv Escalation via OOB Write in MediaTek AFE In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431385; Issue ID: MSV-9920.
CVE-2026-20575	Nov 02, 2026	MediaTek AFE Use After Free Local Privilege Escalation In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431394; Issue ID: MSV-9921.
CVE-2026-20574	Nov 02, 2026	MediaTek AFE Use-After-Free PrivEsc In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431400; Issue ID: MSV-9922.
CVE-2026-20573	Nov 02, 2026	Double-free in MediaTek AFE causes local priv escalation In afe, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431412; Issue ID: MSV-9923.
CVE-2026-20572	Nov 02, 2026	MediaTek ADSP OOB Write via Integer Overflow Escalates Privilege In adsp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431442; Issue ID: MSV-9924.
CVE-2026-20571	Nov 02, 2026	Use-After-Free in MediaTek AFE Driver Enables Local Escalation In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11434319; Issue ID: MSV-9925.
CVE-2026-20570	Nov 02, 2026	MediaTek adsp Use-After-Free Enables Local Privilege Escalation In adsp, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431474; Issue ID: MSV-9926.
CVE-2026-20569	Nov 02, 2026	MediaTek ADSP UAF Causing Local Priv Escalation In adsp, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431474; Issue ID: MSV-9927.
CVE-2026-20568	Nov 02, 2026	MediaTek AFE Use-After-Free Causing Priv Escalation In afe, there is a possible system crash due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11439283; Issue ID: MSV-10003.
CVE-2026-20567	Nov 02, 2026	MediaTek AFE OOB Write Enables Local Priv Esc In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431394; Issue ID: MSV-10004.
CVE-2026-20566	Nov 02, 2026	MediaTek Modem OOB Write -> RDoS via Missing Bounds Check In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: MOLY01923663 / ALPS11315955; Issue ID: MSV-10866.
CVE-2026-20565	Nov 02, 2026	MediaTek Modem OOB Write in Bound Check Leads to Local Escalation In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01778991; Issue ID: MSV-8900.
CVE-2026-20564	Nov 02, 2026	MediaTek Modem OOB Write Leads to Local DoS In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01780439; Issue ID: MSV-8901.
CVE-2026-20563	Nov 02, 2026	MediaTek Modem OOB Write Enables Remote DoS via Rogue Base Station In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01777997; Issue ID: MSV-8905.
CVE-2026-20562	Nov 02, 2026	MediaTek Modem OOB Write & DoS In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01775984; Issue ID: MSV-8907.
CVE-2026-20561	Nov 02, 2026	MediaTek Modem OOB Write Remote DoS In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01750090; Issue ID: MSV-8908.
CVE-2026-20560	Nov 02, 2026	Remote DoS via Modem Crash in Mediatek Firmware In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01870543; Issue ID: MSV-9070.
CVE-2026-20559	Nov 02, 2026	MediaTek GPU PDMA Use-after-Free Causing Local Escalation In GPU pdma, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11365081; Issue ID: MSV-9545.
CVE-2026-20558	Nov 02, 2026	MediaTek GPU PDMA UAF causes local privilege escalation on Android In GPU pdma, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11365070; Issue ID: MSV-9547.
CVE-2026-20557	Nov 02, 2026	MediaTek Modem OOB Write Remote Priv Esc via Rogue Base Station In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01877236; Issue ID: MSV-9804.
CVE-2026-20556	Nov 02, 2026	MediaTek Modem OOB Write Priv Escalation via Rogue Base Station In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01876662; Issue ID: MSV-9833.
CVE-2026-20555	Nov 02, 2026	MediaTek Modem OOB Read Allows Remote DoS In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01876664; Issue ID: MSV-9834.
CVE-2026-20554	Nov 02, 2026	MediaTek Modem: Bounds Check Omission Crash & Priv Escalation In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01911177; Issue ID: MSV-10122.
CVE-2026-20553	Nov 02, 2026	MediaTek Device OOB Write in DA Enables Local PrivEsc (Physical Access) In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11468968; Issue ID: MSV-10166.
CVE-2026-20552	Nov 02, 2026	MediaTek MT6880 ccci OOB Write Allowing Remote Denial of Service In ccci, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11523478 (Note: For MT6880, MT6890) / ALPS11297423 (Note: For MT6813, MT6986, MT6982, MT6980D) / AUTO00864897 (Note: For MT2735, MT2737); Issue ID: MSV-10724.
CVE-2026-20551	Nov 02, 2026	Out-of-Bounds Write in MediaTek GNSS Driver (Local DoS) In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11309305; Issue ID: MSV-10730.
CVE-2026-20550	Nov 02, 2026	MediaTek GNSS local OOB write leading to DoS In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11309816; Issue ID: MSV-10731.