mt8370_firmware vulnerabilities
CVEs whose affected-version data names the mt8370_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-20544Medium· 6.8In meta, there is a possible out of bounds write due to a missing bounds check
In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User inte…
▾ Sunlitmediatek · mt8910_firmwareEPSS 0.17%via NVD
CVE-2026-20542Medium· 6.7In apusys, there is a possible memory corruption due to use after free
In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Pat…
▾ Sunlitmediatek · mt2718_firmwareEPSS 0.11%via NVD