mediatek records

1,069 published records for vendor mediatek.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 20
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

1,069 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
53Plan	CVE-2024-20017Proof of concept	In wlan service, there is a possible out of bounds write due to improper input validation.mediatek · software development kit · CWE-20 pre-auth RCE	Critical9.8	—	46.6%	Mar 3, 2024
40Plan	CVE-2022-21744No exploit	In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check.mediatek · lr11 · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	3.4%	Jul 6, 2022
40Plan	CVE-2019-15027No exploit	The MediaTek Embedded Multimedia Card (eMMC) subsystem for Android on MT65xx, MT66xx, and MT8163 SoC devices allows attackers to execute arbmediatek · mt8163 firmware · CWE-78 pre-auth RCE Command injection	Critical9.8	—	3.2%	Aug 14, 2019
40Plan	CVE-2022-20083No exploit	In Modem 2G/3G CC, there is a possible out of bounds write due to a missing bounds check.mediatek · lr11 · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	2.8%	Jul 6, 2022
40Plan	CVE-2021-31574No exploit	In Config Manager, there is a possible command injection due to improper input validation.mediatek · en7580 firmware · CWE-77 pre-auth RCE Command injection	Critical9.8	—	1.7%	Feb 6, 2023
40Plan	CVE-2021-31573No exploit	In Config Manager, there is a possible command injection due to improper input validation.mediatek · en7580 firmware · CWE-77 pre-auth RCE Command injection	Critical9.8	—	1.7%	Feb 6, 2023
40Plan	CVE-2021-31575No exploit	In Config Manager, there is a possible command injection due to improper input validation.mediatek · en7580 firmware · CWE-77 pre-auth RCE Command injection	Critical9.8	—	1.7%	Feb 6, 2023
39Monitor	CVE-2022-32665No exploit	In Boa, there is a possible command injection due to improper input validation.mediatek · linkit software development kit · CWE-77 pre-auth RCE Command injection	Critical9.8	—	1.5%	Jan 3, 2023
39Monitor	CVE-2021-30636No exploit	In MediaTek LinkIt SDK before 4.6.1, there is a possible memory corruption due to an integer overflow during mishandled memory allocation bymediatek · linkit software development kit · CWE-190 Pre-auth Memory safety	Critical9.8	—	1.5%	Jan 23, 2022
39Monitor	CVE-2022-26437No exploit	In httpclient, there is a possible out of bounds write due to uninitialized data.mediatek · nbiot sdk · CWE-908 Pre-auth Memory safety	Critical9.8	—	1.4%	Aug 1, 2022
39Monitor	CVE-2024-20082No exploit	In Modem, there is a possible memory corruption due to a missing bounds check.mediatek · nr15 · CWE-119 pre-auth RCE Memory safety	Critical9.8	—	1.4%	Aug 13, 2024
39Monitor	CVE-2021-31578No exploit	In Boa, there is a possible escalation of privilege due to a stack buffer overflow.mediatek · en7580 firmware · CWE-787 Pre-auth Memory safety	Critical9.8	—	1.3%	Feb 6, 2023
39Monitor	CVE-2021-31577No exploit	In Boa, there is a possible escalation of privilege due to a missing permission check.mediatek · en7580 firmware · CWE-862 Pre-auth Broken access control (IDOR)	Critical9.8	—	1.1%	Feb 6, 2023
39Monitor	CVE-2023-32874No exploit	In Modem IMS Stack, there is a possible out of bounds write due to a missing bounds check.mediatek · lr13 · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	1.0%	Jan 1, 2024
39Monitor	CVE-2024-20018No exploit	In wlan driver, there is a possible out of bounds write due to improper input validation.mediatek · software development kit · CWE-787 Pre-auth Memory safety	Critical9.8	—	1.0%	Mar 3, 2024
39Monitor	CVE-2025-20646No exploit	In wlan AP FW, there is a possible out of bounds write due to improper input validation.mediatek · software development kit · CWE-787 Pre-auth Memory safety	Critical9.8	—	0.9%	Mar 2, 2025
39Monitor	CVE-2018-21089No exploit	An issue was discovered on Samsung mobile devices with N(7.x) (MT6755/MT6757 Mediatek models) software.mediatek · mt6755 · CWE-190 pre-auth RCE Memory safety	Critical9.8	—	0.8%	Apr 8, 2020
39Monitor	CVE-2025-20654No exploit	In wlan service, there is a possible out of bounds write due to an incorrect bounds check.mediatek · software development kit · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	0.8%	Apr 7, 2025
39Monitor	CVE-2025-20680No exploit	In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check.mediatek · nbiot sdk · CWE-122 Pre-auth Memory safety	Critical9.8	—	0.8%	Jul 7, 2025
39Monitor	CVE-2025-20634No exploit	In Modem, there is a possible out of bounds write due to a missing bounds check.mediatek · nr16 · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	0.8%	Feb 3, 2025
39Monitor	CVE-2025-20674No exploit	In wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission check.openwrt · openwrt · CWE-863 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.8%	Jun 1, 2025
39Monitor	CVE-2022-26447No exploit	In BT firmware, there is a possible out of bounds write due to a missing bounds check.google · android · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	0.7%	Sep 6, 2022
39Monitor	CVE-2024-20067No exploit	In modem, there is a possible out of bounds write due to improper input invalidation.mediatek · nr16 · CWE-787 Pre-auth Memory safety	Critical9.8	—	0.7%	Jun 2, 2024
39Monitor	CVE-2025-20672No exploit	In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check.mediatek · mt7902 firmware · CWE-122 Pre-auth Memory safety	Critical9.8	—	0.6%	Jun 1, 2025
39Monitor	CVE-2025-20681No exploit	In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.mediatek · software development kit · CWE-787 Pre-auth Memory safety	Critical9.8	—	0.6%	Jul 7, 2025

CVE-2024-20017
53Plan
In wlan service, there is a possible out of bounds write due to improper input validation.
CriticalCVSS 9.8Proof of conceptEPSS 47%
- pre-auth RCE
mediatek · software development kitMar 3, 2024
CVE-2022-21744
40Plan
In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check.
CriticalCVSS 9.8No exploitEPSS 3%
- pre-auth RCE
- Memory safety
mediatek · lr11Jul 6, 2022
CVE-2019-15027
40Plan
The MediaTek Embedded Multimedia Card (eMMC) subsystem for Android on MT65xx, MT66xx, and MT8163 SoC devices allows attackers to execute arb
CriticalCVSS 9.8No exploitEPSS 3%
- pre-auth RCE
- Command injection
mediatek · mt8163 firmwareAug 14, 2019
CVE-2022-20083
40Plan
In Modem 2G/3G CC, there is a possible out of bounds write due to a missing bounds check.
CriticalCVSS 9.8No exploitEPSS 3%
- pre-auth RCE
- Memory safety
mediatek · lr11Jul 6, 2022
CVE-2021-31574
40Plan
In Config Manager, there is a possible command injection due to improper input validation.
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
- Command injection
mediatek · en7580 firmwareFeb 6, 2023
CVE-2021-31573
40Plan
In Config Manager, there is a possible command injection due to improper input validation.
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
- Command injection
mediatek · en7580 firmwareFeb 6, 2023
CVE-2021-31575
40Plan
In Config Manager, there is a possible command injection due to improper input validation.
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
- Command injection
mediatek · en7580 firmwareFeb 6, 2023
CVE-2022-32665
39Monitor
In Boa, there is a possible command injection due to improper input validation.
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
- Command injection
mediatek · linkit software development kitJan 3, 2023
CVE-2021-30636
39Monitor
In MediaTek LinkIt SDK before 4.6.1, there is a possible memory corruption due to an integer overflow during mishandled memory allocation by
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
mediatek · linkit software development kitJan 23, 2022
CVE-2022-26437
39Monitor
In httpclient, there is a possible out of bounds write due to uninitialized data.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
mediatek · nbiot sdkAug 1, 2022
CVE-2024-20082
39Monitor
In Modem, there is a possible memory corruption due to a missing bounds check.
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Memory safety
mediatek · nr15Aug 13, 2024
CVE-2021-31578
39Monitor
In Boa, there is a possible escalation of privilege due to a stack buffer overflow.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
mediatek · en7580 firmwareFeb 6, 2023
CVE-2021-31577
39Monitor
In Boa, there is a possible escalation of privilege due to a missing permission check.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Broken access control (IDOR)
mediatek · en7580 firmwareFeb 6, 2023
CVE-2023-32874
39Monitor
In Modem IMS Stack, there is a possible out of bounds write due to a missing bounds check.
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Memory safety
mediatek · lr13Jan 1, 2024
CVE-2024-20018
39Monitor
In wlan driver, there is a possible out of bounds write due to improper input validation.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
mediatek · software development kitMar 3, 2024
CVE-2025-20646
39Monitor
In wlan AP FW, there is a possible out of bounds write due to improper input validation.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
mediatek · software development kitMar 2, 2025
CVE-2018-21089
39Monitor
An issue was discovered on Samsung mobile devices with N(7.x) (MT6755/MT6757 Mediatek models) software.
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Memory safety
mediatek · mt6755Apr 8, 2020
CVE-2025-20654
39Monitor
In wlan service, there is a possible out of bounds write due to an incorrect bounds check.
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Memory safety
mediatek · software development kitApr 7, 2025
CVE-2025-20680
39Monitor
In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
mediatek · nbiot sdkJul 7, 2025
CVE-2025-20634
39Monitor
In Modem, there is a possible out of bounds write due to a missing bounds check.
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Memory safety
mediatek · nr16Feb 3, 2025
CVE-2025-20674
39Monitor
In wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission check.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Broken access control (IDOR)
openwrt · openwrtJun 1, 2025
CVE-2022-26447
39Monitor
In BT firmware, there is a possible out of bounds write due to a missing bounds check.
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Memory safety
google · androidSep 6, 2022
CVE-2024-20067
39Monitor
In modem, there is a possible out of bounds write due to improper input invalidation.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
mediatek · nr16Jun 2, 2024
CVE-2025-20672
39Monitor
In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
mediatek · mt7902 firmwareJun 1, 2025
CVE-2025-20681
39Monitor
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
mediatek · software development kitJul 7, 2025