mt8188_firmware vulnerabilities
CVEs whose affected-version data names the mt8188_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
18 CVEsRSS
CVE-2026-20586High· 8.8In vdec, there is a possible out of bounds write due to a missing bounds check
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS…
CVE-2026-20523High· 8.4In neuropilot, there is a possible out of bounds write due to a missing bounds check
In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch…
CVE-2026-20589Medium· 6.7In venc, there is a possible out of bounds write due to type confusion
In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Pat…
CVE-2026-20522High· 8.4In neuropilot, there is a possible out of bounds write due to a missing bounds check
In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch…
CVE-2026-20521High· 8.4In Video HAL, there is a possible escalation of privilege due to a missing bounds check
In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Pa…
CVE-2026-20579Medium· 6.7In vdec, there is a possible out of bounds write due to type confusion
In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Pat…
CVE-2026-20588Medium· 6.7In mtee, there is a possible escalation of privilege due to a missing bounds check
In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for explo…
CVE-2026-20587Medium· 6.7In mtee, there is a possible escalation of privilege due to type confusion
In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.…
CVE-2026-20544Medium· 6.8In meta, there is a possible out of bounds write due to a missing bounds check
In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User inte…
CVE-2026-20529Medium· 6.7In battery, there is a possible out of bounds write due to a missing bounds check
In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploi…
CVE-2026-20542Medium· 6.7In apusys, there is a possible memory corruption due to use after free
In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Pat…
CVE-2026-20530Medium· 6.7In display, there is a possible out of bounds write due to a missing bounds check
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploi…
CVE-2026-20535Medium· 6.7In aidl, there is a possible escalation of privilege due to a missing permission check
In aidl, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for e…
CVE-2026-20533Medium· 6.7In display, there is a possible escalation of privilege due to an integer overflow
In display, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for explo…
CVE-2026-20536Medium· 6.7In aidl, there is a possible memory corruption due to use after free
In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch…
CVE-2026-20537Medium· 6.7In aidl, there is a possible memory corruption due to use after free
In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch…
CVE-2026-20502High· 8.4In vdec, there is a possible out of bounds write due to a missing bounds check
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A…
CVE-2026-20501High· 8.4In vdec, there is a possible out of bounds write due to a heap buffer overflow
In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A…