VulnSea

mt6785_firmware vulnerabilities

CVEs whose affected-version data names the mt6785_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

8 CVEsRSS

CVE-2026-20539Medium· 5.3
3w ago

In Modem, there is a possible out of bounds read due to a missing bounds check

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privilege…

▾ Sunlitmediatek · mt2716_firmwareEPSS 0.18%via NVD
CVE-2026-20541Medium· 5.3
3w ago

In Modem, there is a possible out of bounds read due to a missing permission check

In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privi…

▾ Sunlitmediatek · mt6985_firmwareEPSS 0.18%via NVD
CVE-2026-20540Medium· 5.3
3w ago

In Modem, there is a possible out of bounds read due to a missing bounds check

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privilege…

▾ Sunlitmediatek · mt2716_firmwareEPSS 0.18%via NVD
CVE-2026-20534Medium· 5.3
3w ago

In Modem, there is a possible out of bounds read due to an incorrect bounds check

In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privil…

▾ Sunlitmediatek · mt2716_firmwareEPSS 0.18%via NVD
CVE-2026-20543Medium· 5.5
3w ago

In Modem, there is a possible information disclosure due to a logic error

In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY016…

▾ Sunlitmediatek · mt2716_firmwareEPSS 0.12%via NVD
CVE-2026-20538Medium· 5.3
3w ago

In Modem, there is a possible out of bounds read due to a missing permission check

In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privi…

▾ Sunlitmediatek · mt2716_firmwareEPSS 0.18%via NVD
CVE-2026-20502High· 8.4
1mo ago

In vdec, there is a possible out of bounds write due to a missing bounds check

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A…

▾ Twilightmediatek · mt2718_firmwareEPSS 0.18%via NVD
CVE-2026-20501High· 8.4
1mo ago

In vdec, there is a possible out of bounds write due to a heap buffer overflow

In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A…

▾ Twilightmediatek · mt2718_firmwareEPSS 0.18%via NVD
mt6785_firmware vulnerabilities (CVEs) · VulnSea