Vulnerabilities (CVE)

Filtered by vendor Mediatek Subscribe
Filtered by product Mt8863 Firmware
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-20431 1 Mediatek 38 Mt6813, Mt6813 Firmware, Mt6815 and 35 more 2026-04-10 N/A 6.5 MEDIUM
In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01106496; Issue ID: MSV-4467.
CVE-2026-20432 1 Mediatek 116 Mt2735, Mt2735 Firmware, Mt2737 and 113 more 2026-04-10 N/A 8.0 HIGH
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01406170; Issue ID: MSV-4461.
CVE-2026-20433 1 Mediatek 124 Mt2735, Mt2735 Firmware, Mt2737 and 121 more 2026-04-10 N/A 8.8 HIGH
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01088681; Issue ID: MSV-4460.
CVE-2025-20659 1 Mediatek 170 Mt2735, Mt2735 Firmware, Mt2737 and 167 more 2026-02-17 N/A 6.5 MEDIUM
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01519028; Issue ID: MSV-2768.