Vulnerabilities (CVE)

Filtered by vendor Mediatek Subscribe
Filtered by product Mt8766r Firmware
Total 7 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-20483 1 Mediatek 70 Mt6739, Mt6739 Firmware, Mt6761 and 67 more 2026-10-23 N/A 7.7 HIGH
In Telephony, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11087526; Issue ID: MSV-8243.
CVE-2026-20541 1 Mediatek 166 Mt2716, Mt2716 Firmware, Mt2735 and 163 more 2026-10-09 N/A 5.3 MEDIUM
In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8911.
CVE-2026-20540 1 Mediatek 166 Mt2716, Mt2716 Firmware, Mt2735 and 163 more 2026-10-09 N/A 5.3 MEDIUM
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8912.
CVE-2026-20539 1 Mediatek 166 Mt2716, Mt2716 Firmware, Mt2735 and 163 more 2026-10-09 N/A 5.3 MEDIUM
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8913.
CVE-2026-20538 1 Mediatek 166 Mt2716, Mt2716 Firmware, Mt2735 and 163 more 2026-10-09 N/A 5.3 MEDIUM
In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8914.
CVE-2026-20534 1 Mediatek 166 Mt2716, Mt2716 Firmware, Mt2735 and 163 more 2026-10-09 N/A 5.3 MEDIUM
In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01797547; Issue ID: MSV-9155.
CVE-2026-20543 1 Mediatek 166 Mt2716, Mt2716 Firmware, Mt2735 and 163 more 2026-10-08 N/A 5.5 MEDIUM
In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01645293; Issue ID: MSV-6761.