Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-20636 State: PUBLISHED Published: 2025-02-03T03:23:52.918Z Last Updated: 2025-03-19T17:39:12.068Z Vendors: MediaTek, Inc. Products: MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6983, MT6985, MT8321, MT8385, MT8666, MT8667, MT8673, MT8755, MT8765, MT8766, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8795T, MT8796, MT8797, MT8798 Problem Types: CWE-787 Description: In secmem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alread
ds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09403554; Issue ID: MSV-2431. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/February-2025
CVE ID: CVE-2025-20637 State: PUBLISHED Published: 2025-02-03T03:23:54.470Z Last Updated: 2025-03-17T14:51:18.493Z Vendors: MediaTek, Inc. Products: MT7981, MT7986 Problem Types: CWE-248 Description: In network HW, there is a possible system hang due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00399035; Issue ID: MSV-2380. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/February-2025
CVE ID: CVE-2025-20638 State: PUBLISHED Published: 2025-02-03T03:23:59.474Z Last Updated: 2025-02-03T15:58:37.948Z Vendors: MediaTek, Inc. Products: MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8167, MT8167S, MT8175, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8395, MT8666, MT8667, MT8673, MT8675, MT8678, MT8765, MT8766, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8795T, MT8797, MT8798, MT8893 Problem Types: CWE-457 Description: In DA, there is a possible read of uninitialized heap data due to uninitialized data. This could lead to local information disclosure, if an attacker has physical acces
heap data due to uninitialized data. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291449; Issue ID: MSV-2066. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/February-2025
CVE ID: CVE-2025-20639 State: PUBLISHED Published: 2025-02-03T03:24:01.156Z Last Updated: 2025-02-03T17:23:00.356Z Vendors: MediaTek, Inc. Products: MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8167, MT8167S, MT8175, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8395, MT8666, MT8667, MT8673, MT8675, MT8678, MT8765, MT8766, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8795T, MT8797, MT8798, MT8893 Problem Types: CWE-787 Description: In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to th
ue to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291146; Issue ID: MSV-2060. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/February-2025
CVE ID: CVE-2025-20640 State: PUBLISHED Published: 2025-02-03T03:24:03.332Z Last Updated: 2025-02-03T17:21:58.142Z Vendors: MediaTek, Inc. Products: MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8167, MT8167S, MT8175, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8395, MT8666, MT8667, MT8673, MT8675, MT8678, MT8765, MT8766, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8795T, MT8797, MT8798, MT8893 Problem Types: CWE-125 Description: In DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the
e to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291146; Issue ID: MSV-2059. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/February-2025
CVE ID: CVE-2025-20641 State: PUBLISHED Published: 2025-02-03T03:24:04.876Z Last Updated: 2025-02-03T17:20:37.187Z Vendors: MediaTek, Inc. Products: MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8167, MT8167S, MT8175, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8395, MT8666, MT8667, MT8673, MT8675, MT8678, MT8765, MT8766, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8795T, MT8797, MT8798, MT8893 Problem Types: CWE-787 Description: In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to th
ue to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291146; Issue ID: MSV-2058. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/February-2025
CVE ID: CVE-2025-20642 State: PUBLISHED Published: 2025-02-03T03:24:06.483Z Last Updated: 2025-02-03T17:17:21.117Z Vendors: MediaTek, Inc. Products: MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8167, MT8167S, MT8175, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8395, MT8666, MT8667, MT8673, MT8675, MT8678, MT8765, MT8766, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8795T, MT8797, MT8798, MT8893 Problem Types: CWE-787 Description: In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to th
ue to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291146; Issue ID: MSV-2057. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/February-2025
CVE ID: CVE-2025-20643 State: PUBLISHED Published: 2025-02-03T03:24:08.097Z Last Updated: 2025-02-03T17:15:03.076Z Vendors: MediaTek, Inc. Products: MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8167, MT8167S, MT8175, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8395, MT8666, MT8667, MT8673, MT8675, MT8678, MT8765, MT8766, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8795T, MT8797, MT8798, MT8893 Problem Types: CWE-1295 Description: In DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the
ue to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the device, if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS09291146; Issue ID: MSV-2056. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/February-2025
CVE ID: CVE-2025-20644 State: PUBLISHED Published: 2025-03-03T02:25:27.877Z Last Updated: 2025-03-04T16:21:10.735Z Vendors: MediaTek, Inc. Products: MT2735, MT2737, MT6833, MT6833P, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT8673, MT8791T, MT8795T, MT8798 Problem Types: CWE-1286 Description: In Modem, there is a possible memory corruption due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by th
or handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01525673; Issue ID: MSV-2747. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/March-2025
CVE ID: CVE-2025-20645 State: PUBLISHED Published: 2025-03-03T02:25:29.510Z Last Updated: 2025-03-06T04:55:15.322Z Vendors: MediaTek, Inc. Products: MT6765, MT6768, MT6833, MT6835, MT6853, MT6855, MT6879, MT6886, MT6893, MT6897, MT6983, MT6985, MT6989, MT8796 Problem Types: CWE-787 Description: In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09475476; Issue ID: MSV-2599. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bull
V-2599. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/March-2025
CVE ID: CVE-2025-20646 State: PUBLISHED Published: 2025-03-03T02:25:31.065Z Last Updated: 2025-03-06T04:55:16.799Z Vendors: MediaTek, Inc. Products: MT6890, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-787 Description: In wlan AP FW, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389074; Issue ID: MSV-1803. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/March-2025
CVE ID: CVE-2025-20647 State: PUBLISHED Published: 2025-03-03T02:25:32.706Z Last Updated: 2025-03-03T14:56:48.714Z Vendors: MediaTek, Inc. Products: MT2735, MT2737, MT6739, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6771, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6785U, MT6789, MT6833, MT6833P, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT8666, MT8667, MT8675, MT8765, MT8766, MT8768, MT8781, MT8786, M
83, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT8666, MT8667, MT8675, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8795T, MT8797, MT8798 Problem Types: CWE-476 Description: In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00791311 / MOLY01067019; Issue ID: MSV-2721. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/March-2025
CVE ID: CVE-2025-20648 State: PUBLISHED Published: 2025-03-03T02:25:42.280Z Last Updated: 2025-03-04T16:16:45.516Z Vendors: MediaTek, Inc. Products: MT2718, MT6879, MT6989, MT8196, MT8370, MT8390, MT8395, MT8673, MT8678 Problem Types: CWE-125 Description: In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09456673; Issue ID: MSV-2584. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/March-2025
CVE ID: CVE-2025-20649 State: PUBLISHED Published: 2025-03-03T02:25:43.966Z Last Updated: 2025-03-04T16:14:59.538Z Vendors: MediaTek, Inc. Products: MT6880, MT6890, MT6980, MT6990, MT7663, MT7902, MT7925, MT7927, MT7961 Problem Types: CWE-280 Description: In Bluetooth Stack SW, there is a possible information disclosure due to a missing permission check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00396437; Issue ID: MSV-2184. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/March-2025
CVE ID: CVE-2025-20650 State: PUBLISHED Published: 2025-03-03T02:25:45.646Z Last Updated: 2025-03-06T04:55:18.157Z Vendors: MediaTek, Inc. Products: MT2737, MT6781, MT6789, MT6835, MT6855, MT6878, MT6879, MT6880, MT6886, MT6890, MT6895, MT6897, MT6980, MT6983, MT6985, MT6989, MT6990, MT8370, MT8390, MT8676, MT8678 Problem Types: CWE-787 Description: In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291294; Issue ID: MSV-2061. Additional Analyst Notes: - CISA
er interaction is needed for exploitation. Patch ID: ALPS09291294; Issue ID: MSV-2061. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/March-2025
CVE ID: CVE-2025-20651 State: PUBLISHED Published: 2025-03-03T02:25:47.228Z Last Updated: 2025-03-03T19:01:46.250Z Vendors: MediaTek, Inc. Products: MT2737, MT6781, MT6789, MT6835, MT6855, MT6878, MT6879, MT6880, MT6886, MT6890, MT6895, MT6897, MT6980, MT6983, MT6985, MT6989, MT6990, MT8370, MT8390, MT8676, MT8678 Problem Types: CWE-125 Description: In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291294; Issue ID: MSV-2062. Additional Analyst Notes: - CISA AD
interaction is needed for exploitation. Patch ID: ALPS09291294; Issue ID: MSV-2062. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/March-2025
CVE ID: CVE-2025-20652 State: PUBLISHED Published: 2025-03-03T02:25:48.870Z Last Updated: 2025-03-04T16:11:22.574Z Vendors: MediaTek, Inc. Products: MT6580, MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8167, MT8167S, MT8175, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8395, MT8666, MT8667, MT8673, MT8675, MT8678, MT8765, MT8766, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8795T, MT8797, MT8798, MT8893 Problem Types: CWE-125 Description: In V5 DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical acc
nds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291215; Issue ID: MSV-2052. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/March-2025
CVE ID: CVE-2025-20653 State: PUBLISHED Published: 2025-03-03T02:25:50.462Z Last Updated: 2025-03-20T18:53:09.070Z Vendors: MediaTek, Inc. Products: MT6781, MT6789, MT6835, MT6855, MT6878, MT6879, MT6886, MT6895, MT6897, MT6983, MT6985, MT6989, MT8370, MT8390 Problem Types: CWE-190 Description: In da, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291064; Issue ID: MSV-2046. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/pro
1064; Issue ID: MSV-2046. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/March-2025
CVE ID: CVE-2025-20654 State: PUBLISHED Published: 2025-04-07T03:14:45.563Z Last Updated: 2025-04-08T03:55:50.683Z Vendors: MediaTek, Inc. Products: MT6890, MT7622, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-787 Description: In wlan service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00406897; Issue ID: MSV-2875. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/April-2025
CVE ID: CVE-2025-20655 State: PUBLISHED Published: 2025-04-07T03:14:47.279Z Last Updated: 2025-04-07T18:23:10.649Z Vendors: MediaTek, Inc. Products: MT9972 Problem Types: CWE-125 Description: In keymaster, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04427687; Issue ID: MSV-3183. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/April-2025
CVE ID: CVE-2025-20656 State: PUBLISHED Published: 2025-04-07T03:14:49.018Z Last Updated: 2025-04-07T13:57:13.648Z Vendors: MediaTek, Inc. Products: MT6781, MT6789, MT6835, MT6855, MT6878, MT6879, MT6886, MT6895, MT6897, MT6983, MT6985, MT6989, MT6990, MT8196, MT8370, MT8390 Problem Types: CWE-787 Description: In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09625423; Issue ID: MSV-3033. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
ation. Patch ID: ALPS09625423; Issue ID: MSV-3033. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/April-2025
CVE ID: CVE-2025-20657 State: PUBLISHED Published: 2025-04-07T03:14:50.803Z Last Updated: 2025-04-09T18:28:29.603Z Vendors: MediaTek, Inc. Products: MT6765, MT6768, MT6781, MT6789, MT6833, MT6853, MT6877, MT6885, MT8768, MT8771, MT8781, MT8786, MT8791T Problem Types: CWE-787 Description: In vdec, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09486425; Issue ID: MSV-2609. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/April-2
tional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/April-2025
CVE ID: CVE-2025-20658 State: PUBLISHED Published: 2025-04-07T03:14:52.452Z Last Updated: 2025-04-07T18:22:01.666Z Vendors: MediaTek, Inc. Products: MT2718, MT6781, MT6789, MT6835, MT6855, MT6878, MT6879, MT6886, MT6895, MT6897, MT6983, MT6985, MT6989, MT8196, MT8673, MT8676, MT8678, MT8781 Problem Types: CWE-787 Description: In DA, there is a possible permission bypass due to a logic error. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09474894; Issue ID: MSV-2597. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
ploitation. Patch ID: ALPS09474894; Issue ID: MSV-2597. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/April-2025
CVE ID: CVE-2025-20659 State: PUBLISHED Published: 2025-04-07T03:14:54.034Z Last Updated: 2025-04-07T14:18:54.949Z Vendors: MediaTek, Inc. Products: MT2735, MT2737, MT6739, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6771, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6785U, MT6789, MT6813, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991,
5, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8667, MT8673, MT8675, MT8676, MT8678, MT8765, MT8766, MT8768, MT8771, MT8781, MT8786, MT8788, MT8788E, MT8791T, MT8796, MT8797, MT8798, MT8863 Problem Types: CWE-125 Description: In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01519028; Issue ID: MSV-2768. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
eded for exploitation. Patch ID: MOLY01519028; Issue ID: MSV-2768. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/April-2025
CVE ID: CVE-2025-20660 State: PUBLISHED Published: 2025-04-07T03:14:55.701Z Last Updated: 2025-04-09T18:28:13.798Z Vendors: MediaTek, Inc. Products: MT9972 Problem Types: CWE-125 Description: In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04436357; Issue ID: MSV-3186. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/April-2025
CVE ID: CVE-2025-20661 State: PUBLISHED Published: 2025-04-07T03:14:57.311Z Last Updated: 2025-04-08T03:55:46.243Z Vendors: MediaTek, Inc. Products: MT9972 Problem Types: CWE-125 Description: In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04436357; Issue ID: MSV-3185. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/April-2025