Search

Find a vulnerability

Search criteria Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    12 vulnerabilities found for mt8910_firmware by mediatek

    CVE-2026-20455 (GCVE-0-2026-20455)

    Vulnerability from nvd – Published: 2026-06-01 03:20 – Updated: 2026-06-02 03:55
    VLAI
    Summary
    In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10873936; Issue ID: MSV-6784.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    Impacted products
    Vendor Product Version
    MediaTek, Inc. MediaTek chipset Affected: MT6739
    Affected: MT6761
    Affected: MT6765
    Affected: MT6768
    Affected: MT6781
    Affected: MT6789
    Affected: MT6835
    Affected: MT6853
    Affected: MT6855
    Affected: MT6877
    Affected: MT6878
    Affected: MT6879
    Affected: MT6883
    Affected: MT6885
    Affected: MT6886
    Affected: MT6889
    Affected: MT6893
    Affected: MT6895
    Affected: MT6897
    Affected: MT6899
    Affected: MT6983
    Affected: MT6985
    Affected: MT6989
    Affected: MT6991
    Affected: MT8673
    Affected: MT8765
    Affected: MT8766
    Affected: MT8768
    Affected: MT8781
    Affected: MT8786
    Affected: MT8788
    Affected: MT8791T
    Affected: MT8793
    Affected: MT8797
    Affected: MT8798
    Affected: MT8910
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "LOCAL",
                  "availabilityImpact": "HIGH",
                  "baseScore": 7.8,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "LOW",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-20455",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-06-01T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-06-02T03:55:41.765Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "MediaTek chipset",
              "vendor": "MediaTek, Inc.",
              "versions": [
                {
                  "status": "affected",
                  "version": "MT6739"
                },
                {
                  "status": "affected",
                  "version": "MT6761"
                },
                {
                  "status": "affected",
                  "version": "MT6765"
                },
                {
                  "status": "affected",
                  "version": "MT6768"
                },
                {
                  "status": "affected",
                  "version": "MT6781"
                },
                {
                  "status": "affected",
                  "version": "MT6789"
                },
                {
                  "status": "affected",
                  "version": "MT6835"
                },
                {
                  "status": "affected",
                  "version": "MT6853"
                },
                {
                  "status": "affected",
                  "version": "MT6855"
                },
                {
                  "status": "affected",
                  "version": "MT6877"
                },
                {
                  "status": "affected",
                  "version": "MT6878"
                },
                {
                  "status": "affected",
                  "version": "MT6879"
                },
                {
                  "status": "affected",
                  "version": "MT6883"
                },
                {
                  "status": "affected",
                  "version": "MT6885"
                },
                {
                  "status": "affected",
                  "version": "MT6886"
                },
                {
                  "status": "affected",
                  "version": "MT6889"
                },
                {
                  "status": "affected",
                  "version": "MT6893"
                },
                {
                  "status": "affected",
                  "version": "MT6895"
                },
                {
                  "status": "affected",
                  "version": "MT6897"
                },
                {
                  "status": "affected",
                  "version": "MT6899"
                },
                {
                  "status": "affected",
                  "version": "MT6983"
                },
                {
                  "status": "affected",
                  "version": "MT6985"
                },
                {
                  "status": "affected",
                  "version": "MT6989"
                },
                {
                  "status": "affected",
                  "version": "MT6991"
                },
                {
                  "status": "affected",
                  "version": "MT8673"
                },
                {
                  "status": "affected",
                  "version": "MT8765"
                },
                {
                  "status": "affected",
                  "version": "MT8766"
                },
                {
                  "status": "affected",
                  "version": "MT8768"
                },
                {
                  "status": "affected",
                  "version": "MT8781"
                },
                {
                  "status": "affected",
                  "version": "MT8786"
                },
                {
                  "status": "affected",
                  "version": "MT8788"
                },
                {
                  "status": "affected",
                  "version": "MT8791T"
                },
                {
                  "status": "affected",
                  "version": "MT8793"
                },
                {
                  "status": "affected",
                  "version": "MT8797"
                },
                {
                  "status": "affected",
                  "version": "MT8798"
                },
                {
                  "status": "affected",
                  "version": "MT8910"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10873936; Issue ID: MSV-6784."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-787",
                  "description": "CWE-787 Out-of-bounds Write",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-06-01T03:20:12.838Z",
            "orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
            "shortName": "MediaTek"
          },
          "references": [
            {
              "url": "https://corp.mediatek.com/product-security-bulletin/June-2026"
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
        "assignerShortName": "MediaTek",
        "cveId": "CVE-2026-20455",
        "datePublished": "2026-06-01T03:20:12.838Z",
        "dateReserved": "2025-11-03T01:30:59.014Z",
        "dateUpdated": "2026-06-02T03:55:41.765Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-20454 (GCVE-0-2026-20454)

    Vulnerability from nvd – Published: 2026-06-01 03:20 – Updated: 2026-06-02 03:55
    VLAI
    Summary
    In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10873936; Issue ID: MSV-6786.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition
    Assigner
    Impacted products
    Vendor Product Version
    MediaTek, Inc. MediaTek chipset Affected: MT6739
    Affected: MT6761
    Affected: MT6765
    Affected: MT6768
    Affected: MT6781
    Affected: MT6789
    Affected: MT6835
    Affected: MT6853
    Affected: MT6855
    Affected: MT6877
    Affected: MT6878
    Affected: MT6879
    Affected: MT6883
    Affected: MT6885
    Affected: MT6886
    Affected: MT6889
    Affected: MT6893
    Affected: MT6895
    Affected: MT6897
    Affected: MT6899
    Affected: MT6983
    Affected: MT6985
    Affected: MT6989
    Affected: MT6991
    Affected: MT8673
    Affected: MT8765
    Affected: MT8766
    Affected: MT8768
    Affected: MT8781
    Affected: MT8786
    Affected: MT8788
    Affected: MT8791T
    Affected: MT8793
    Affected: MT8797
    Affected: MT8798
    Affected: MT8910
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "HIGH",
                  "attackVector": "LOCAL",
                  "availabilityImpact": "HIGH",
                  "baseScore": 6.4,
                  "baseSeverity": "MEDIUM",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "HIGH",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-20454",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-06-01T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-06-02T03:55:40.620Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "MediaTek chipset",
              "vendor": "MediaTek, Inc.",
              "versions": [
                {
                  "status": "affected",
                  "version": "MT6739"
                },
                {
                  "status": "affected",
                  "version": "MT6761"
                },
                {
                  "status": "affected",
                  "version": "MT6765"
                },
                {
                  "status": "affected",
                  "version": "MT6768"
                },
                {
                  "status": "affected",
                  "version": "MT6781"
                },
                {
                  "status": "affected",
                  "version": "MT6789"
                },
                {
                  "status": "affected",
                  "version": "MT6835"
                },
                {
                  "status": "affected",
                  "version": "MT6853"
                },
                {
                  "status": "affected",
                  "version": "MT6855"
                },
                {
                  "status": "affected",
                  "version": "MT6877"
                },
                {
                  "status": "affected",
                  "version": "MT6878"
                },
                {
                  "status": "affected",
                  "version": "MT6879"
                },
                {
                  "status": "affected",
                  "version": "MT6883"
                },
                {
                  "status": "affected",
                  "version": "MT6885"
                },
                {
                  "status": "affected",
                  "version": "MT6886"
                },
                {
                  "status": "affected",
                  "version": "MT6889"
                },
                {
                  "status": "affected",
                  "version": "MT6893"
                },
                {
                  "status": "affected",
                  "version": "MT6895"
                },
                {
                  "status": "affected",
                  "version": "MT6897"
                },
                {
                  "status": "affected",
                  "version": "MT6899"
                },
                {
                  "status": "affected",
                  "version": "MT6983"
                },
                {
                  "status": "affected",
                  "version": "MT6985"
                },
                {
                  "status": "affected",
                  "version": "MT6989"
                },
                {
                  "status": "affected",
                  "version": "MT6991"
                },
                {
                  "status": "affected",
                  "version": "MT8673"
                },
                {
                  "status": "affected",
                  "version": "MT8765"
                },
                {
                  "status": "affected",
                  "version": "MT8766"
                },
                {
                  "status": "affected",
                  "version": "MT8768"
                },
                {
                  "status": "affected",
                  "version": "MT8781"
                },
                {
                  "status": "affected",
                  "version": "MT8786"
                },
                {
                  "status": "affected",
                  "version": "MT8788"
                },
                {
                  "status": "affected",
                  "version": "MT8791T"
                },
                {
                  "status": "affected",
                  "version": "MT8793"
                },
                {
                  "status": "affected",
                  "version": "MT8797"
                },
                {
                  "status": "affected",
                  "version": "MT8798"
                },
                {
                  "status": "affected",
                  "version": "MT8910"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10873936; Issue ID: MSV-6786."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-367",
                  "description": "CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-06-01T03:20:11.445Z",
            "orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
            "shortName": "MediaTek"
          },
          "references": [
            {
              "url": "https://corp.mediatek.com/product-security-bulletin/June-2026"
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
        "assignerShortName": "MediaTek",
        "cveId": "CVE-2026-20454",
        "datePublished": "2026-06-01T03:20:11.445Z",
        "dateReserved": "2025-11-03T01:30:59.014Z",
        "dateUpdated": "2026-06-02T03:55:40.620Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-20453 (GCVE-0-2026-20453)

    Vulnerability from nvd – Published: 2026-06-01 03:20 – Updated: 2026-06-02 03:55
    VLAI
    Summary
    In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10886526; Issue ID: MSV-6791.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    Impacted products
    Vendor Product Version
    MediaTek, Inc. MediaTek chipset Affected: MT6739
    Affected: MT6761
    Affected: MT6765
    Affected: MT6768
    Affected: MT6781
    Affected: MT6789
    Affected: MT6835
    Affected: MT6853
    Affected: MT6855
    Affected: MT6877
    Affected: MT6878
    Affected: MT6879
    Affected: MT6883
    Affected: MT6885
    Affected: MT6886
    Affected: MT6889
    Affected: MT6893
    Affected: MT6895
    Affected: MT6897
    Affected: MT6899
    Affected: MT6983
    Affected: MT6985
    Affected: MT6989
    Affected: MT6991
    Affected: MT8673
    Affected: MT8765
    Affected: MT8766
    Affected: MT8768
    Affected: MT8781
    Affected: MT8786
    Affected: MT8788
    Affected: MT8791T
    Affected: MT8793
    Affected: MT8797
    Affected: MT8798
    Affected: MT8910
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "LOCAL",
                  "availabilityImpact": "HIGH",
                  "baseScore": 6.7,
                  "baseSeverity": "MEDIUM",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "HIGH",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-20453",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-06-01T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-06-02T03:55:39.373Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "MediaTek chipset",
              "vendor": "MediaTek, Inc.",
              "versions": [
                {
                  "status": "affected",
                  "version": "MT6739"
                },
                {
                  "status": "affected",
                  "version": "MT6761"
                },
                {
                  "status": "affected",
                  "version": "MT6765"
                },
                {
                  "status": "affected",
                  "version": "MT6768"
                },
                {
                  "status": "affected",
                  "version": "MT6781"
                },
                {
                  "status": "affected",
                  "version": "MT6789"
                },
                {
                  "status": "affected",
                  "version": "MT6835"
                },
                {
                  "status": "affected",
                  "version": "MT6853"
                },
                {
                  "status": "affected",
                  "version": "MT6855"
                },
                {
                  "status": "affected",
                  "version": "MT6877"
                },
                {
                  "status": "affected",
                  "version": "MT6878"
                },
                {
                  "status": "affected",
                  "version": "MT6879"
                },
                {
                  "status": "affected",
                  "version": "MT6883"
                },
                {
                  "status": "affected",
                  "version": "MT6885"
                },
                {
                  "status": "affected",
                  "version": "MT6886"
                },
                {
                  "status": "affected",
                  "version": "MT6889"
                },
                {
                  "status": "affected",
                  "version": "MT6893"
                },
                {
                  "status": "affected",
                  "version": "MT6895"
                },
                {
                  "status": "affected",
                  "version": "MT6897"
                },
                {
                  "status": "affected",
                  "version": "MT6899"
                },
                {
                  "status": "affected",
                  "version": "MT6983"
                },
                {
                  "status": "affected",
                  "version": "MT6985"
                },
                {
                  "status": "affected",
                  "version": "MT6989"
                },
                {
                  "status": "affected",
                  "version": "MT6991"
                },
                {
                  "status": "affected",
                  "version": "MT8673"
                },
                {
                  "status": "affected",
                  "version": "MT8765"
                },
                {
                  "status": "affected",
                  "version": "MT8766"
                },
                {
                  "status": "affected",
                  "version": "MT8768"
                },
                {
                  "status": "affected",
                  "version": "MT8781"
                },
                {
                  "status": "affected",
                  "version": "MT8786"
                },
                {
                  "status": "affected",
                  "version": "MT8788"
                },
                {
                  "status": "affected",
                  "version": "MT8791T"
                },
                {
                  "status": "affected",
                  "version": "MT8793"
                },
                {
                  "status": "affected",
                  "version": "MT8797"
                },
                {
                  "status": "affected",
                  "version": "MT8798"
                },
                {
                  "status": "affected",
                  "version": "MT8910"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10886526; Issue ID: MSV-6791."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-787",
                  "description": "CWE-787 Out-of-bounds Write",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-06-01T03:20:09.951Z",
            "orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
            "shortName": "MediaTek"
          },
          "references": [
            {
              "url": "https://corp.mediatek.com/product-security-bulletin/June-2026"
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
        "assignerShortName": "MediaTek",
        "cveId": "CVE-2026-20453",
        "datePublished": "2026-06-01T03:20:09.951Z",
        "dateReserved": "2025-11-03T01:30:59.013Z",
        "dateUpdated": "2026-06-02T03:55:39.373Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-20451 (GCVE-0-2026-20451)

    Vulnerability from nvd – Published: 2026-05-04 05:42 – Updated: 2026-05-05 03:56
    VLAI
    Summary
    In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10828685; Issue ID: MSV-6504.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
    Assigner
    Impacted products
    Vendor Product Version
    MediaTek, Inc. MediaTek chipset Affected: MT2718
    Affected: MT6899
    Affected: MT6985
    Affected: MT6989
    Affected: MT6991
    Affected: MT8115
    Affected: MT8186
    Affected: MT8188
    Affected: MT8196
    Affected: MT8365
    Affected: MT8367
    Affected: MT8370
    Affected: MT8371
    Affected: MT8390
    Affected: MT8391
    Affected: MT8395
    Affected: MT8676
    Affected: MT8678
    Affected: MT8766
    Affected: MT8768
    Affected: MT8775
    Affected: MT8781
    Affected: MT8786
    Affected: MT8788E
    Affected: MT8791T
    Affected: MT8792
    Affected: MT8793
    Affected: MT8796
    Affected: MT8873
    Affected: MT8883
    Affected: MT8893
    Affected: MT8910
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "LOCAL",
                  "availabilityImpact": "HIGH",
                  "baseScore": 6.7,
                  "baseSeverity": "MEDIUM",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "HIGH",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-20451",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-04T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-05T03:56:05.990Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "MediaTek chipset",
              "vendor": "MediaTek, Inc.",
              "versions": [
                {
                  "status": "affected",
                  "version": "MT2718"
                },
                {
                  "status": "affected",
                  "version": "MT6899"
                },
                {
                  "status": "affected",
                  "version": "MT6985"
                },
                {
                  "status": "affected",
                  "version": "MT6989"
                },
                {
                  "status": "affected",
                  "version": "MT6991"
                },
                {
                  "status": "affected",
                  "version": "MT8115"
                },
                {
                  "status": "affected",
                  "version": "MT8186"
                },
                {
                  "status": "affected",
                  "version": "MT8188"
                },
                {
                  "status": "affected",
                  "version": "MT8196"
                },
                {
                  "status": "affected",
                  "version": "MT8365"
                },
                {
                  "status": "affected",
                  "version": "MT8367"
                },
                {
                  "status": "affected",
                  "version": "MT8370"
                },
                {
                  "status": "affected",
                  "version": "MT8371"
                },
                {
                  "status": "affected",
                  "version": "MT8390"
                },
                {
                  "status": "affected",
                  "version": "MT8391"
                },
                {
                  "status": "affected",
                  "version": "MT8395"
                },
                {
                  "status": "affected",
                  "version": "MT8676"
                },
                {
                  "status": "affected",
                  "version": "MT8678"
                },
                {
                  "status": "affected",
                  "version": "MT8766"
                },
                {
                  "status": "affected",
                  "version": "MT8768"
                },
                {
                  "status": "affected",
                  "version": "MT8775"
                },
                {
                  "status": "affected",
                  "version": "MT8781"
                },
                {
                  "status": "affected",
                  "version": "MT8786"
                },
                {
                  "status": "affected",
                  "version": "MT8788E"
                },
                {
                  "status": "affected",
                  "version": "MT8791T"
                },
                {
                  "status": "affected",
                  "version": "MT8792"
                },
                {
                  "status": "affected",
                  "version": "MT8793"
                },
                {
                  "status": "affected",
                  "version": "MT8796"
                },
                {
                  "status": "affected",
                  "version": "MT8873"
                },
                {
                  "status": "affected",
                  "version": "MT8883"
                },
                {
                  "status": "affected",
                  "version": "MT8893"
                },
                {
                  "status": "affected",
                  "version": "MT8910"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10828685; Issue ID: MSV-6504."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-843",
                  "description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-04T05:42:29.660Z",
            "orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
            "shortName": "MediaTek"
          },
          "references": [
            {
              "url": "https://corp.mediatek.com/product-security-bulletin/May-2026"
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
        "assignerShortName": "MediaTek",
        "cveId": "CVE-2026-20451",
        "datePublished": "2026-05-04T05:42:29.660Z",
        "dateReserved": "2025-11-03T01:30:59.013Z",
        "dateUpdated": "2026-05-05T03:56:05.990Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-20448 (GCVE-0-2026-20448)

    Vulnerability from nvd – Published: 2026-05-04 05:41 – Updated: 2026-05-05 03:56
    VLAI
    Summary
    In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10708513; Issue ID: MSV-6281.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-280 - Improper Handling of Insufficient Permissions or Privileges
    Assigner
    Impacted products
    Vendor Product Version
    MediaTek, Inc. MediaTek chipset Affected: MT6765
    Affected: MT6768
    Affected: MT6789
    Affected: MT6877
    Affected: MT6897
    Affected: MT6899
    Affected: MT6989
    Affected: MT6991
    Affected: MT6993
    Affected: MT8367
    Affected: MT8766
    Affected: MT8768
    Affected: MT8775
    Affected: MT8781
    Affected: MT8786
    Affected: MT8788E
    Affected: MT8791T
    Affected: MT8792
    Affected: MT8793
    Affected: MT8796
    Affected: MT8893
    Affected: MT8910
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "LOCAL",
                  "availabilityImpact": "HIGH",
                  "baseScore": 6.7,
                  "baseSeverity": "MEDIUM",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "HIGH",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-20448",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-04T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-05T03:56:07.381Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "MediaTek chipset",
              "vendor": "MediaTek, Inc.",
              "versions": [
                {
                  "status": "affected",
                  "version": "MT6765"
                },
                {
                  "status": "affected",
                  "version": "MT6768"
                },
                {
                  "status": "affected",
                  "version": "MT6789"
                },
                {
                  "status": "affected",
                  "version": "MT6877"
                },
                {
                  "status": "affected",
                  "version": "MT6897"
                },
                {
                  "status": "affected",
                  "version": "MT6899"
                },
                {
                  "status": "affected",
                  "version": "MT6989"
                },
                {
                  "status": "affected",
                  "version": "MT6991"
                },
                {
                  "status": "affected",
                  "version": "MT6993"
                },
                {
                  "status": "affected",
                  "version": "MT8367"
                },
                {
                  "status": "affected",
                  "version": "MT8766"
                },
                {
                  "status": "affected",
                  "version": "MT8768"
                },
                {
                  "status": "affected",
                  "version": "MT8775"
                },
                {
                  "status": "affected",
                  "version": "MT8781"
                },
                {
                  "status": "affected",
                  "version": "MT8786"
                },
                {
                  "status": "affected",
                  "version": "MT8788E"
                },
                {
                  "status": "affected",
                  "version": "MT8791T"
                },
                {
                  "status": "affected",
                  "version": "MT8792"
                },
                {
                  "status": "affected",
                  "version": "MT8793"
                },
                {
                  "status": "affected",
                  "version": "MT8796"
                },
                {
                  "status": "affected",
                  "version": "MT8893"
                },
                {
                  "status": "affected",
                  "version": "MT8910"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10708513; Issue ID: MSV-6281."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-280",
                  "description": "CWE-280 Improper Handling of Insufficient Permissions or Privileges",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-04T05:41:52.927Z",
            "orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
            "shortName": "MediaTek"
          },
          "references": [
            {
              "url": "https://corp.mediatek.com/product-security-bulletin/May-2026"
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
        "assignerShortName": "MediaTek",
        "cveId": "CVE-2026-20448",
        "datePublished": "2026-05-04T05:41:52.927Z",
        "dateReserved": "2025-11-03T01:30:59.013Z",
        "dateUpdated": "2026-05-05T03:56:07.381Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-20447 (GCVE-0-2026-20447)

    Vulnerability from nvd – Published: 2026-05-04 05:41 – Updated: 2026-05-05 03:56
    VLAI
    Summary
    In geniezone, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10724073; Issue ID: MSV-6296.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    Impacted products
    Vendor Product Version
    MediaTek, Inc. MediaTek chipset Affected: MT6768
    Affected: MT6789
    Affected: MT6877
    Affected: MT6899
    Affected: MT6989
    Affected: MT6991
    Affected: MT6993
    Affected: MT8196
    Affected: MT8367
    Affected: MT8766
    Affected: MT8768
    Affected: MT8781
    Affected: MT8786
    Affected: MT8788E
    Affected: MT8791T
    Affected: MT8793
    Affected: MT8910
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "LOCAL",
                  "availabilityImpact": "HIGH",
                  "baseScore": 6.7,
                  "baseSeverity": "MEDIUM",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "HIGH",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-20447",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-04T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-05T03:56:08.477Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "MediaTek chipset",
              "vendor": "MediaTek, Inc.",
              "versions": [
                {
                  "status": "affected",
                  "version": "MT6768"
                },
                {
                  "status": "affected",
                  "version": "MT6789"
                },
                {
                  "status": "affected",
                  "version": "MT6877"
                },
                {
                  "status": "affected",
                  "version": "MT6899"
                },
                {
                  "status": "affected",
                  "version": "MT6989"
                },
                {
                  "status": "affected",
                  "version": "MT6991"
                },
                {
                  "status": "affected",
                  "version": "MT6993"
                },
                {
                  "status": "affected",
                  "version": "MT8196"
                },
                {
                  "status": "affected",
                  "version": "MT8367"
                },
                {
                  "status": "affected",
                  "version": "MT8766"
                },
                {
                  "status": "affected",
                  "version": "MT8768"
                },
                {
                  "status": "affected",
                  "version": "MT8781"
                },
                {
                  "status": "affected",
                  "version": "MT8786"
                },
                {
                  "status": "affected",
                  "version": "MT8788E"
                },
                {
                  "status": "affected",
                  "version": "MT8791T"
                },
                {
                  "status": "affected",
                  "version": "MT8793"
                },
                {
                  "status": "affected",
                  "version": "MT8910"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "In geniezone, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10724073; Issue ID: MSV-6296."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-125",
                  "description": "CWE-125 Out-of-bounds Read",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-04T05:41:51.218Z",
            "orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
            "shortName": "MediaTek"
          },
          "references": [
            {
              "url": "https://corp.mediatek.com/product-security-bulletin/May-2026"
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
        "assignerShortName": "MediaTek",
        "cveId": "CVE-2026-20447",
        "datePublished": "2026-05-04T05:41:51.218Z",
        "dateReserved": "2025-11-03T01:30:59.013Z",
        "dateUpdated": "2026-05-05T03:56:08.477Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-20455 (GCVE-0-2026-20455)

    Vulnerability from cvelistv5 – Published: 2026-06-01 03:20 – Updated: 2026-06-02 03:55
    VLAI
    Summary
    In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10873936; Issue ID: MSV-6784.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    Impacted products
    Vendor Product Version
    MediaTek, Inc. MediaTek chipset Affected: MT6739
    Affected: MT6761
    Affected: MT6765
    Affected: MT6768
    Affected: MT6781
    Affected: MT6789
    Affected: MT6835
    Affected: MT6853
    Affected: MT6855
    Affected: MT6877
    Affected: MT6878
    Affected: MT6879
    Affected: MT6883
    Affected: MT6885
    Affected: MT6886
    Affected: MT6889
    Affected: MT6893
    Affected: MT6895
    Affected: MT6897
    Affected: MT6899
    Affected: MT6983
    Affected: MT6985
    Affected: MT6989
    Affected: MT6991
    Affected: MT8673
    Affected: MT8765
    Affected: MT8766
    Affected: MT8768
    Affected: MT8781
    Affected: MT8786
    Affected: MT8788
    Affected: MT8791T
    Affected: MT8793
    Affected: MT8797
    Affected: MT8798
    Affected: MT8910
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "LOCAL",
                  "availabilityImpact": "HIGH",
                  "baseScore": 7.8,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "LOW",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-20455",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-06-01T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-06-02T03:55:41.765Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "MediaTek chipset",
              "vendor": "MediaTek, Inc.",
              "versions": [
                {
                  "status": "affected",
                  "version": "MT6739"
                },
                {
                  "status": "affected",
                  "version": "MT6761"
                },
                {
                  "status": "affected",
                  "version": "MT6765"
                },
                {
                  "status": "affected",
                  "version": "MT6768"
                },
                {
                  "status": "affected",
                  "version": "MT6781"
                },
                {
                  "status": "affected",
                  "version": "MT6789"
                },
                {
                  "status": "affected",
                  "version": "MT6835"
                },
                {
                  "status": "affected",
                  "version": "MT6853"
                },
                {
                  "status": "affected",
                  "version": "MT6855"
                },
                {
                  "status": "affected",
                  "version": "MT6877"
                },
                {
                  "status": "affected",
                  "version": "MT6878"
                },
                {
                  "status": "affected",
                  "version": "MT6879"
                },
                {
                  "status": "affected",
                  "version": "MT6883"
                },
                {
                  "status": "affected",
                  "version": "MT6885"
                },
                {
                  "status": "affected",
                  "version": "MT6886"
                },
                {
                  "status": "affected",
                  "version": "MT6889"
                },
                {
                  "status": "affected",
                  "version": "MT6893"
                },
                {
                  "status": "affected",
                  "version": "MT6895"
                },
                {
                  "status": "affected",
                  "version": "MT6897"
                },
                {
                  "status": "affected",
                  "version": "MT6899"
                },
                {
                  "status": "affected",
                  "version": "MT6983"
                },
                {
                  "status": "affected",
                  "version": "MT6985"
                },
                {
                  "status": "affected",
                  "version": "MT6989"
                },
                {
                  "status": "affected",
                  "version": "MT6991"
                },
                {
                  "status": "affected",
                  "version": "MT8673"
                },
                {
                  "status": "affected",
                  "version": "MT8765"
                },
                {
                  "status": "affected",
                  "version": "MT8766"
                },
                {
                  "status": "affected",
                  "version": "MT8768"
                },
                {
                  "status": "affected",
                  "version": "MT8781"
                },
                {
                  "status": "affected",
                  "version": "MT8786"
                },
                {
                  "status": "affected",
                  "version": "MT8788"
                },
                {
                  "status": "affected",
                  "version": "MT8791T"
                },
                {
                  "status": "affected",
                  "version": "MT8793"
                },
                {
                  "status": "affected",
                  "version": "MT8797"
                },
                {
                  "status": "affected",
                  "version": "MT8798"
                },
                {
                  "status": "affected",
                  "version": "MT8910"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10873936; Issue ID: MSV-6784."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-787",
                  "description": "CWE-787 Out-of-bounds Write",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-06-01T03:20:12.838Z",
            "orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
            "shortName": "MediaTek"
          },
          "references": [
            {
              "url": "https://corp.mediatek.com/product-security-bulletin/June-2026"
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
        "assignerShortName": "MediaTek",
        "cveId": "CVE-2026-20455",
        "datePublished": "2026-06-01T03:20:12.838Z",
        "dateReserved": "2025-11-03T01:30:59.014Z",
        "dateUpdated": "2026-06-02T03:55:41.765Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-20454 (GCVE-0-2026-20454)

    Vulnerability from cvelistv5 – Published: 2026-06-01 03:20 – Updated: 2026-06-02 03:55
    VLAI
    Summary
    In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10873936; Issue ID: MSV-6786.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition
    Assigner
    Impacted products
    Vendor Product Version
    MediaTek, Inc. MediaTek chipset Affected: MT6739
    Affected: MT6761
    Affected: MT6765
    Affected: MT6768
    Affected: MT6781
    Affected: MT6789
    Affected: MT6835
    Affected: MT6853
    Affected: MT6855
    Affected: MT6877
    Affected: MT6878
    Affected: MT6879
    Affected: MT6883
    Affected: MT6885
    Affected: MT6886
    Affected: MT6889
    Affected: MT6893
    Affected: MT6895
    Affected: MT6897
    Affected: MT6899
    Affected: MT6983
    Affected: MT6985
    Affected: MT6989
    Affected: MT6991
    Affected: MT8673
    Affected: MT8765
    Affected: MT8766
    Affected: MT8768
    Affected: MT8781
    Affected: MT8786
    Affected: MT8788
    Affected: MT8791T
    Affected: MT8793
    Affected: MT8797
    Affected: MT8798
    Affected: MT8910
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "HIGH",
                  "attackVector": "LOCAL",
                  "availabilityImpact": "HIGH",
                  "baseScore": 6.4,
                  "baseSeverity": "MEDIUM",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "HIGH",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-20454",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-06-01T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-06-02T03:55:40.620Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "MediaTek chipset",
              "vendor": "MediaTek, Inc.",
              "versions": [
                {
                  "status": "affected",
                  "version": "MT6739"
                },
                {
                  "status": "affected",
                  "version": "MT6761"
                },
                {
                  "status": "affected",
                  "version": "MT6765"
                },
                {
                  "status": "affected",
                  "version": "MT6768"
                },
                {
                  "status": "affected",
                  "version": "MT6781"
                },
                {
                  "status": "affected",
                  "version": "MT6789"
                },
                {
                  "status": "affected",
                  "version": "MT6835"
                },
                {
                  "status": "affected",
                  "version": "MT6853"
                },
                {
                  "status": "affected",
                  "version": "MT6855"
                },
                {
                  "status": "affected",
                  "version": "MT6877"
                },
                {
                  "status": "affected",
                  "version": "MT6878"
                },
                {
                  "status": "affected",
                  "version": "MT6879"
                },
                {
                  "status": "affected",
                  "version": "MT6883"
                },
                {
                  "status": "affected",
                  "version": "MT6885"
                },
                {
                  "status": "affected",
                  "version": "MT6886"
                },
                {
                  "status": "affected",
                  "version": "MT6889"
                },
                {
                  "status": "affected",
                  "version": "MT6893"
                },
                {
                  "status": "affected",
                  "version": "MT6895"
                },
                {
                  "status": "affected",
                  "version": "MT6897"
                },
                {
                  "status": "affected",
                  "version": "MT6899"
                },
                {
                  "status": "affected",
                  "version": "MT6983"
                },
                {
                  "status": "affected",
                  "version": "MT6985"
                },
                {
                  "status": "affected",
                  "version": "MT6989"
                },
                {
                  "status": "affected",
                  "version": "MT6991"
                },
                {
                  "status": "affected",
                  "version": "MT8673"
                },
                {
                  "status": "affected",
                  "version": "MT8765"
                },
                {
                  "status": "affected",
                  "version": "MT8766"
                },
                {
                  "status": "affected",
                  "version": "MT8768"
                },
                {
                  "status": "affected",
                  "version": "MT8781"
                },
                {
                  "status": "affected",
                  "version": "MT8786"
                },
                {
                  "status": "affected",
                  "version": "MT8788"
                },
                {
                  "status": "affected",
                  "version": "MT8791T"
                },
                {
                  "status": "affected",
                  "version": "MT8793"
                },
                {
                  "status": "affected",
                  "version": "MT8797"
                },
                {
                  "status": "affected",
                  "version": "MT8798"
                },
                {
                  "status": "affected",
                  "version": "MT8910"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10873936; Issue ID: MSV-6786."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-367",
                  "description": "CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-06-01T03:20:11.445Z",
            "orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
            "shortName": "MediaTek"
          },
          "references": [
            {
              "url": "https://corp.mediatek.com/product-security-bulletin/June-2026"
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
        "assignerShortName": "MediaTek",
        "cveId": "CVE-2026-20454",
        "datePublished": "2026-06-01T03:20:11.445Z",
        "dateReserved": "2025-11-03T01:30:59.014Z",
        "dateUpdated": "2026-06-02T03:55:40.620Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-20453 (GCVE-0-2026-20453)

    Vulnerability from cvelistv5 – Published: 2026-06-01 03:20 – Updated: 2026-06-02 03:55
    VLAI
    Summary
    In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10886526; Issue ID: MSV-6791.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    Impacted products
    Vendor Product Version
    MediaTek, Inc. MediaTek chipset Affected: MT6739
    Affected: MT6761
    Affected: MT6765
    Affected: MT6768
    Affected: MT6781
    Affected: MT6789
    Affected: MT6835
    Affected: MT6853
    Affected: MT6855
    Affected: MT6877
    Affected: MT6878
    Affected: MT6879
    Affected: MT6883
    Affected: MT6885
    Affected: MT6886
    Affected: MT6889
    Affected: MT6893
    Affected: MT6895
    Affected: MT6897
    Affected: MT6899
    Affected: MT6983
    Affected: MT6985
    Affected: MT6989
    Affected: MT6991
    Affected: MT8673
    Affected: MT8765
    Affected: MT8766
    Affected: MT8768
    Affected: MT8781
    Affected: MT8786
    Affected: MT8788
    Affected: MT8791T
    Affected: MT8793
    Affected: MT8797
    Affected: MT8798
    Affected: MT8910
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "LOCAL",
                  "availabilityImpact": "HIGH",
                  "baseScore": 6.7,
                  "baseSeverity": "MEDIUM",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "HIGH",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-20453",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-06-01T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-06-02T03:55:39.373Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "MediaTek chipset",
              "vendor": "MediaTek, Inc.",
              "versions": [
                {
                  "status": "affected",
                  "version": "MT6739"
                },
                {
                  "status": "affected",
                  "version": "MT6761"
                },
                {
                  "status": "affected",
                  "version": "MT6765"
                },
                {
                  "status": "affected",
                  "version": "MT6768"
                },
                {
                  "status": "affected",
                  "version": "MT6781"
                },
                {
                  "status": "affected",
                  "version": "MT6789"
                },
                {
                  "status": "affected",
                  "version": "MT6835"
                },
                {
                  "status": "affected",
                  "version": "MT6853"
                },
                {
                  "status": "affected",
                  "version": "MT6855"
                },
                {
                  "status": "affected",
                  "version": "MT6877"
                },
                {
                  "status": "affected",
                  "version": "MT6878"
                },
                {
                  "status": "affected",
                  "version": "MT6879"
                },
                {
                  "status": "affected",
                  "version": "MT6883"
                },
                {
                  "status": "affected",
                  "version": "MT6885"
                },
                {
                  "status": "affected",
                  "version": "MT6886"
                },
                {
                  "status": "affected",
                  "version": "MT6889"
                },
                {
                  "status": "affected",
                  "version": "MT6893"
                },
                {
                  "status": "affected",
                  "version": "MT6895"
                },
                {
                  "status": "affected",
                  "version": "MT6897"
                },
                {
                  "status": "affected",
                  "version": "MT6899"
                },
                {
                  "status": "affected",
                  "version": "MT6983"
                },
                {
                  "status": "affected",
                  "version": "MT6985"
                },
                {
                  "status": "affected",
                  "version": "MT6989"
                },
                {
                  "status": "affected",
                  "version": "MT6991"
                },
                {
                  "status": "affected",
                  "version": "MT8673"
                },
                {
                  "status": "affected",
                  "version": "MT8765"
                },
                {
                  "status": "affected",
                  "version": "MT8766"
                },
                {
                  "status": "affected",
                  "version": "MT8768"
                },
                {
                  "status": "affected",
                  "version": "MT8781"
                },
                {
                  "status": "affected",
                  "version": "MT8786"
                },
                {
                  "status": "affected",
                  "version": "MT8788"
                },
                {
                  "status": "affected",
                  "version": "MT8791T"
                },
                {
                  "status": "affected",
                  "version": "MT8793"
                },
                {
                  "status": "affected",
                  "version": "MT8797"
                },
                {
                  "status": "affected",
                  "version": "MT8798"
                },
                {
                  "status": "affected",
                  "version": "MT8910"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10886526; Issue ID: MSV-6791."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-787",
                  "description": "CWE-787 Out-of-bounds Write",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-06-01T03:20:09.951Z",
            "orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
            "shortName": "MediaTek"
          },
          "references": [
            {
              "url": "https://corp.mediatek.com/product-security-bulletin/June-2026"
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
        "assignerShortName": "MediaTek",
        "cveId": "CVE-2026-20453",
        "datePublished": "2026-06-01T03:20:09.951Z",
        "dateReserved": "2025-11-03T01:30:59.013Z",
        "dateUpdated": "2026-06-02T03:55:39.373Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-20451 (GCVE-0-2026-20451)

    Vulnerability from cvelistv5 – Published: 2026-05-04 05:42 – Updated: 2026-05-05 03:56
    VLAI
    Summary
    In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10828685; Issue ID: MSV-6504.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
    Assigner
    Impacted products
    Vendor Product Version
    MediaTek, Inc. MediaTek chipset Affected: MT2718
    Affected: MT6899
    Affected: MT6985
    Affected: MT6989
    Affected: MT6991
    Affected: MT8115
    Affected: MT8186
    Affected: MT8188
    Affected: MT8196
    Affected: MT8365
    Affected: MT8367
    Affected: MT8370
    Affected: MT8371
    Affected: MT8390
    Affected: MT8391
    Affected: MT8395
    Affected: MT8676
    Affected: MT8678
    Affected: MT8766
    Affected: MT8768
    Affected: MT8775
    Affected: MT8781
    Affected: MT8786
    Affected: MT8788E
    Affected: MT8791T
    Affected: MT8792
    Affected: MT8793
    Affected: MT8796
    Affected: MT8873
    Affected: MT8883
    Affected: MT8893
    Affected: MT8910
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "LOCAL",
                  "availabilityImpact": "HIGH",
                  "baseScore": 6.7,
                  "baseSeverity": "MEDIUM",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "HIGH",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-20451",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-04T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-05T03:56:05.990Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "MediaTek chipset",
              "vendor": "MediaTek, Inc.",
              "versions": [
                {
                  "status": "affected",
                  "version": "MT2718"
                },
                {
                  "status": "affected",
                  "version": "MT6899"
                },
                {
                  "status": "affected",
                  "version": "MT6985"
                },
                {
                  "status": "affected",
                  "version": "MT6989"
                },
                {
                  "status": "affected",
                  "version": "MT6991"
                },
                {
                  "status": "affected",
                  "version": "MT8115"
                },
                {
                  "status": "affected",
                  "version": "MT8186"
                },
                {
                  "status": "affected",
                  "version": "MT8188"
                },
                {
                  "status": "affected",
                  "version": "MT8196"
                },
                {
                  "status": "affected",
                  "version": "MT8365"
                },
                {
                  "status": "affected",
                  "version": "MT8367"
                },
                {
                  "status": "affected",
                  "version": "MT8370"
                },
                {
                  "status": "affected",
                  "version": "MT8371"
                },
                {
                  "status": "affected",
                  "version": "MT8390"
                },
                {
                  "status": "affected",
                  "version": "MT8391"
                },
                {
                  "status": "affected",
                  "version": "MT8395"
                },
                {
                  "status": "affected",
                  "version": "MT8676"
                },
                {
                  "status": "affected",
                  "version": "MT8678"
                },
                {
                  "status": "affected",
                  "version": "MT8766"
                },
                {
                  "status": "affected",
                  "version": "MT8768"
                },
                {
                  "status": "affected",
                  "version": "MT8775"
                },
                {
                  "status": "affected",
                  "version": "MT8781"
                },
                {
                  "status": "affected",
                  "version": "MT8786"
                },
                {
                  "status": "affected",
                  "version": "MT8788E"
                },
                {
                  "status": "affected",
                  "version": "MT8791T"
                },
                {
                  "status": "affected",
                  "version": "MT8792"
                },
                {
                  "status": "affected",
                  "version": "MT8793"
                },
                {
                  "status": "affected",
                  "version": "MT8796"
                },
                {
                  "status": "affected",
                  "version": "MT8873"
                },
                {
                  "status": "affected",
                  "version": "MT8883"
                },
                {
                  "status": "affected",
                  "version": "MT8893"
                },
                {
                  "status": "affected",
                  "version": "MT8910"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10828685; Issue ID: MSV-6504."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-843",
                  "description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-04T05:42:29.660Z",
            "orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
            "shortName": "MediaTek"
          },
          "references": [
            {
              "url": "https://corp.mediatek.com/product-security-bulletin/May-2026"
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
        "assignerShortName": "MediaTek",
        "cveId": "CVE-2026-20451",
        "datePublished": "2026-05-04T05:42:29.660Z",
        "dateReserved": "2025-11-03T01:30:59.013Z",
        "dateUpdated": "2026-05-05T03:56:05.990Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-20448 (GCVE-0-2026-20448)

    Vulnerability from cvelistv5 – Published: 2026-05-04 05:41 – Updated: 2026-05-05 03:56
    VLAI
    Summary
    In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10708513; Issue ID: MSV-6281.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-280 - Improper Handling of Insufficient Permissions or Privileges
    Assigner
    Impacted products
    Vendor Product Version
    MediaTek, Inc. MediaTek chipset Affected: MT6765
    Affected: MT6768
    Affected: MT6789
    Affected: MT6877
    Affected: MT6897
    Affected: MT6899
    Affected: MT6989
    Affected: MT6991
    Affected: MT6993
    Affected: MT8367
    Affected: MT8766
    Affected: MT8768
    Affected: MT8775
    Affected: MT8781
    Affected: MT8786
    Affected: MT8788E
    Affected: MT8791T
    Affected: MT8792
    Affected: MT8793
    Affected: MT8796
    Affected: MT8893
    Affected: MT8910
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "LOCAL",
                  "availabilityImpact": "HIGH",
                  "baseScore": 6.7,
                  "baseSeverity": "MEDIUM",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "HIGH",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-20448",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-04T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-05T03:56:07.381Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "MediaTek chipset",
              "vendor": "MediaTek, Inc.",
              "versions": [
                {
                  "status": "affected",
                  "version": "MT6765"
                },
                {
                  "status": "affected",
                  "version": "MT6768"
                },
                {
                  "status": "affected",
                  "version": "MT6789"
                },
                {
                  "status": "affected",
                  "version": "MT6877"
                },
                {
                  "status": "affected",
                  "version": "MT6897"
                },
                {
                  "status": "affected",
                  "version": "MT6899"
                },
                {
                  "status": "affected",
                  "version": "MT6989"
                },
                {
                  "status": "affected",
                  "version": "MT6991"
                },
                {
                  "status": "affected",
                  "version": "MT6993"
                },
                {
                  "status": "affected",
                  "version": "MT8367"
                },
                {
                  "status": "affected",
                  "version": "MT8766"
                },
                {
                  "status": "affected",
                  "version": "MT8768"
                },
                {
                  "status": "affected",
                  "version": "MT8775"
                },
                {
                  "status": "affected",
                  "version": "MT8781"
                },
                {
                  "status": "affected",
                  "version": "MT8786"
                },
                {
                  "status": "affected",
                  "version": "MT8788E"
                },
                {
                  "status": "affected",
                  "version": "MT8791T"
                },
                {
                  "status": "affected",
                  "version": "MT8792"
                },
                {
                  "status": "affected",
                  "version": "MT8793"
                },
                {
                  "status": "affected",
                  "version": "MT8796"
                },
                {
                  "status": "affected",
                  "version": "MT8893"
                },
                {
                  "status": "affected",
                  "version": "MT8910"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10708513; Issue ID: MSV-6281."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-280",
                  "description": "CWE-280 Improper Handling of Insufficient Permissions or Privileges",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-04T05:41:52.927Z",
            "orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
            "shortName": "MediaTek"
          },
          "references": [
            {
              "url": "https://corp.mediatek.com/product-security-bulletin/May-2026"
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
        "assignerShortName": "MediaTek",
        "cveId": "CVE-2026-20448",
        "datePublished": "2026-05-04T05:41:52.927Z",
        "dateReserved": "2025-11-03T01:30:59.013Z",
        "dateUpdated": "2026-05-05T03:56:07.381Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-20447 (GCVE-0-2026-20447)

    Vulnerability from cvelistv5 – Published: 2026-05-04 05:41 – Updated: 2026-05-05 03:56
    VLAI
    Summary
    In geniezone, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10724073; Issue ID: MSV-6296.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    Impacted products
    Vendor Product Version
    MediaTek, Inc. MediaTek chipset Affected: MT6768
    Affected: MT6789
    Affected: MT6877
    Affected: MT6899
    Affected: MT6989
    Affected: MT6991
    Affected: MT6993
    Affected: MT8196
    Affected: MT8367
    Affected: MT8766
    Affected: MT8768
    Affected: MT8781
    Affected: MT8786
    Affected: MT8788E
    Affected: MT8791T
    Affected: MT8793
    Affected: MT8910
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "LOCAL",
                  "availabilityImpact": "HIGH",
                  "baseScore": 6.7,
                  "baseSeverity": "MEDIUM",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "HIGH",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-20447",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-04T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-05T03:56:08.477Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "MediaTek chipset",
              "vendor": "MediaTek, Inc.",
              "versions": [
                {
                  "status": "affected",
                  "version": "MT6768"
                },
                {
                  "status": "affected",
                  "version": "MT6789"
                },
                {
                  "status": "affected",
                  "version": "MT6877"
                },
                {
                  "status": "affected",
                  "version": "MT6899"
                },
                {
                  "status": "affected",
                  "version": "MT6989"
                },
                {
                  "status": "affected",
                  "version": "MT6991"
                },
                {
                  "status": "affected",
                  "version": "MT6993"
                },
                {
                  "status": "affected",
                  "version": "MT8196"
                },
                {
                  "status": "affected",
                  "version": "MT8367"
                },
                {
                  "status": "affected",
                  "version": "MT8766"
                },
                {
                  "status": "affected",
                  "version": "MT8768"
                },
                {
                  "status": "affected",
                  "version": "MT8781"
                },
                {
                  "status": "affected",
                  "version": "MT8786"
                },
                {
                  "status": "affected",
                  "version": "MT8788E"
                },
                {
                  "status": "affected",
                  "version": "MT8791T"
                },
                {
                  "status": "affected",
                  "version": "MT8793"
                },
                {
                  "status": "affected",
                  "version": "MT8910"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "In geniezone, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10724073; Issue ID: MSV-6296."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-125",
                  "description": "CWE-125 Out-of-bounds Read",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-04T05:41:51.218Z",
            "orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
            "shortName": "MediaTek"
          },
          "references": [
            {
              "url": "https://corp.mediatek.com/product-security-bulletin/May-2026"
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
        "assignerShortName": "MediaTek",
        "cveId": "CVE-2026-20447",
        "datePublished": "2026-05-04T05:41:51.218Z",
        "dateReserved": "2025-11-03T01:30:59.013Z",
        "dateUpdated": "2026-05-05T03:56:08.477Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }