mediatek has 56 CVEs on record between 2025 and 2026. Disclosure cadence is accelerating: 36 in the last 90 days against 0 in the 90 before. The busiest recent month was October 2026 with 31. The median CVSS is 6.7 (medium). None have a confirmed exploitation report. The dominant weakness classes are CWE-787 (23) and CWE-121 (7). Most affected products: software_development_kit (13), mt2716_firmware (11), mt2718_firmware (8).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.7
- Publish → KEV
- —
- Last 90 days
- 36 prev 0
Weakness classes
Products
- software_development_kit 13
- mt2716_firmware 11
- mt2718_firmware 8
- mt8910_firmware 5
- nr15 5
- mt2735_firmware 2
Worst active — by depth score
CVE-2026-20586High· 8.8In vdec, there is a possible out of bounds write due to a missing bounds check48CVE-2025-20720High· 8.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check48CVE-2025-20719High· 8.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check48CVE-2025-20712High· 8.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check48CVE-2025-20711High· 8.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check48
mediatek vulnerabilities
CVEs affecting mediatek, newest first. Open any entry for full detail, references, and exploit status.
56 CVEsRSS
CVE-2026-20537Medium· 6.7In aidl, there is a possible memory corruption due to use after free
In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch…
CVE-2026-20504Medium· 5.3In Modem, there is a possible system crash due to a missing bounds check
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges need…
CVE-2026-20503Medium· 5.3In Modem, there is a possible system crash due to a missing bounds check
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges need…
CVE-2026-20502High· 8.4In vdec, there is a possible out of bounds write due to a missing bounds check
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A…
CVE-2026-20501High· 8.4In vdec, there is a possible out of bounds write due to a heap buffer overflow
In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A…
CVE-2026-20500Medium· 5.5In Modem, there is a possible system crash due to improper input validation
In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01810811; Issue ID:…
CVE-2025-20794Medium· 6.5In Modem, there is a possible system crash due to improper input validation
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges n…
CVE-2025-20793Medium· 6.5In Modem, there is a possible system crash due to incorrect error handling
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges ne…
CVE-2025-20762Medium· 6.5In Modem, there is a possible system crash due to incorrect error handling
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges ne…
CVE-2025-20761Medium· 6.5In Modem, there is a possible system crash due to incorrect error handling
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges ne…
CVE-2025-20760Medium· 6.5In Modem, there is a possible read of uninitialized heap data due to an uncaught exception
In Modem, there is a possible read of uninitialized heap data due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional executi…
CVE-2025-20755Medium· 5.3In Modem, there is a possible application crash due to improper input validation
In Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privile…
CVE-2025-20724Medium· 5.5In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check
In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID:…
CVE-2025-20721High· 7.8In imgsensor, there is a possible out of bounds write due to a missing bounds check
In imgsensor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for expl…
CVE-2025-20720High· 8.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not ne…
CVE-2025-20719High· 8.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not ne…
CVE-2025-20718High· 7.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch I…
CVE-2025-20716High· 7.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed …
CVE-2025-20715High· 7.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed …
CVE-2025-20714High· 7.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed …
CVE-2025-20713High· 7.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed …
CVE-2025-20712High· 8.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not ne…
CVE-2025-20711High· 8.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not ne…
CVE-2025-20710High· 8.8In wlan AP driver, there is a possible out of bounds write due to an integer overflow
In wlan AP driver, there is a possible out of bounds write due to an integer overflow. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed f…
CVE-2025-20709High· 8.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not ne…
CVE-2025-20717High· 7.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed …