Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-20696 State: PUBLISHED Published: 2025-08-04T01:49:46.880Z Last Updated: 2025-08-04T13:47:57.557Z Vendors: MediaTek, Inc. Products: MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6813, MT6833, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6990, MT6991, MT8188, MT8196, MT8370, MT8390, MT8676 Problem Types: CWE-787 Description: In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exp
er has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09915215; Issue ID: MSV-3801. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/August-2025
CVE ID: CVE-2025-20697 State: PUBLISHED Published: 2025-08-04T01:49:48.567Z Last Updated: 2025-08-05T03:56:07.647Z Vendors: MediaTek, Inc. Products: MT2718, MT6761, MT6765, MT6768, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6889, MT6893, MT6897, MT6989, MT6991, MT8186, MT8196, MT8391, MT8678, MT8775, MT8786, MT8788E, MT8792, MT8796, MT8873, MT8883, MT8893 Problem Types: CWE-787 Description: In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09915681; Issue ID: MSV-3795.
ined the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09915681; Issue ID: MSV-3795. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/August-2025
CVE ID: CVE-2025-20698 State: PUBLISHED Published: 2025-08-04T01:49:50.189Z Last Updated: 2025-08-05T03:56:12.301Z Vendors: MediaTek, Inc. Products: MT2718, MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6833, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991, MT8186, MT8196, MT8391, MT8676, MT8678, MT8775, MT8786, MT8788E, MT8792, MT8796, MT8873, MT8883, MT8893 Problem Types: CWE-787 Description: In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User
. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09915400; Issue ID: MSV-3793. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/August-2025
CVE ID: CVE-2025-20700 State: PUBLISHED Published: 2025-08-04T06:19:06.133Z Last Updated: 2025-08-05T03:56:09.060Z Vendors: Airoha Technology Corp. Products: AB156x, AB157x, AB158x, AB159x series, AB1627 Problem Types: CWE-306 Description: In the Airoha Bluetooth audio SDK, there is a possible permission bypass that allows access critical data of RACE protocol through Bluetooth LE GATT service. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.airoha.com/product-security-bulletin/2025
CVE ID: CVE-2025-20701 State: PUBLISHED Published: 2025-08-04T06:20:32.057Z Last Updated: 2025-08-05T03:56:10.136Z Vendors: Airoha Technology Corp. Products: AB156x, AB157x, AB158x, AB159x series Problem Types: CWE-863 Description: In the Airoha Bluetooth audio SDK, there is a possible way to pair Bluetooth audio device without user consent. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.airoha.com/product-security-bulletin/2025
CVE ID: CVE-2025-20702 State: PUBLISHED Published: 2025-08-04T06:20:40.458Z Last Updated: 2025-08-05T03:56:11.216Z Vendors: Airoha Technology Corp. Products: AB156x, AB157x, AB158x, AB159x series, AB1627 Problem Types: CWE-306 Description: In the Airoha Bluetooth audio SDK, there is a possible unauthorized access to the RACE protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.airoha.com/product-security-bulletin/2025
CVE ID: CVE-2025-20703 State: PUBLISHED Published: 2025-09-01T05:12:17.909Z Last Updated: 2025-09-02T14:07:22.380Z Vendors: MediaTek, Inc. Products: MT2735, MT2737, MT6813, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8673, MT8675, MT8676, MT8678, MT8771, MT8791, MT8791T, MT8792, MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893 Problem Types: CWE-125 Description: In Modem, there is a possible out o
, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893 Problem Types: CWE-125 Description: In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01599794; Issue ID: MSV-3708. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/September-2025
CVE ID: CVE-2025-20704 State: PUBLISHED Published: 2025-09-01T05:12:19.494Z Last Updated: 2025-09-03T03:55:28.946Z Vendors: MediaTek, Inc. Products: MT6813, MT6835, MT6835T, MT6878, MT6878M, MT6897, MT6899, MT6991, MT8676, MT8678, MT8792, MT8863, MT8873, MT8883 Problem Types: CWE-787 Description: In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01516959; Issue ID: MSV-3502. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
or exploitation. Patch ID: MOLY01516959; Issue ID: MSV-3502. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/September-2025
CVE ID: CVE-2025-20705 State: PUBLISHED Published: 2025-09-01T05:12:21.111Z Last Updated: 2025-09-03T03:55:27.847Z Vendors: MediaTek, Inc. Products: MT2718, MT2735, MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6893, MT6895, MT6897, MT6899, MT6980D, MT6983, MT6985, MT6989, MT6990, MT6991, MT8169, MT8186, MT8188, MT8676, MT8678, MT8696, MT8775, MT8792, MT8796 Problem Types: CWE-416 Description: In monitor_hang, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interac
could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09989078; Issue ID: MSV-3964. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/September-2025
CVE ID: CVE-2025-20706 State: PUBLISHED Published: 2025-09-01T05:12:22.752Z Last Updated: 2025-09-03T03:55:26.770Z Vendors: MediaTek, Inc. Products: MT6899, MT6989, MT6991, MT8676, MT8678 Problem Types: CWE-416 Description: In mbrain, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09924624; Issue ID: MSV-3826. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/September-2025
CVE ID: CVE-2025-20707 State: PUBLISHED Published: 2025-09-01T05:12:24.351Z Last Updated: 2025-09-03T03:55:25.732Z Vendors: MediaTek, Inc. Products: MT2718, MT6853, MT6877, MT6893, MT6899, MT6991, MT8196, MT8676, MT8678, MT8775, MT8786, MT8788E, MT8791T, MT8792, MT8796, MT8883, MT8893 Problem Types: CWE-416 Description: In geniezone, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09924201; Issue ID: MSV-3820. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/produc
1; Issue ID: MSV-3820. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/September-2025
CVE ID: CVE-2025-20708 State: PUBLISHED Published: 2025-09-01T05:12:16.345Z Last Updated: 2025-09-03T03:55:30.011Z Vendors: MediaTek, Inc. Products: MT2735, MT2737, MT6813, MT6815, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8673, MT8675, MT8676, MT8678, MT8771, MT8791, MT8791T, MT8792, MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893 Problem Types: CWE-787 Description: In Modem, there is a possib
MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893 Problem Types: CWE-787 Description: In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01123853; Issue ID: MSV-4131. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/September-2025
CVE ID: CVE-2025-20709 State: PUBLISHED Published: 2025-10-14T09:11:36.184Z Last Updated: 2025-10-15T03:56:22.651Z Vendors: MediaTek, Inc. Products: MT6890, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-120 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00415809; Issue ID: MSV-3405. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/October-2025
CVE ID: CVE-2025-20710 State: PUBLISHED Published: 2025-10-14T09:11:34.351Z Last Updated: 2025-10-15T03:56:23.447Z Vendors: MediaTek, Inc. Products: MT6890, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-190 Description: In wlan AP driver, there is a possible out of bounds write due to an integer overflow. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418785; Issue ID: MSV-3515. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/October-2025
CVE ID: CVE-2025-20711 State: PUBLISHED Published: 2025-10-14T09:11:32.571Z Last Updated: 2025-10-15T03:56:24.372Z Vendors: MediaTek, Inc. Products: MT6890, MT7916, MT7981, MT7986 Problem Types: CWE-1287 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00422399; Issue ID: MSV-3748. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/October-2025
CVE ID: CVE-2025-20712 State: PUBLISHED Published: 2025-10-14T09:11:30.703Z Last Updated: 2025-10-15T03:56:25.160Z Vendors: MediaTek, Inc. Products: MT6990, MT7990, MT7991, MT7992, MT7993 Problem Types: CWE-122 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00422323; Issue ID: MSV-3810. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/October-2025
CVE ID: CVE-2025-20713 State: PUBLISHED Published: 2025-10-14T09:11:45.149Z Last Updated: 2025-10-15T03:56:17.461Z Vendors: MediaTek, Inc. Products: MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-121 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00432661; Issue ID: MSV-3904. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/October-2025
CVE ID: CVE-2025-20714 State: PUBLISHED Published: 2025-10-14T09:11:46.971Z Last Updated: 2025-10-15T03:56:16.354Z Vendors: MediaTek, Inc. Products: MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-121 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00432659; Issue ID: MSV-3902. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/October-2025
CVE ID: CVE-2025-20715 State: PUBLISHED Published: 2025-10-14T09:11:52.310Z Last Updated: 2025-10-15T03:56:14.681Z Vendors: MediaTek, Inc. Products: MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-787 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00421152; Issue ID: MSV-3731. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/October-2025
CVE ID: CVE-2025-20716 State: PUBLISHED Published: 2025-10-14T09:11:54.119Z Last Updated: 2025-10-15T03:56:13.913Z Vendors: MediaTek, Inc. Products: MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-787 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00421149; Issue ID: MSV-3728. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/October-2025
CVE ID: CVE-2025-20717 State: PUBLISHED Published: 2025-10-14T09:11:56.081Z Last Updated: 2025-10-15T03:56:13.103Z Vendors: MediaTek, Inc. Products: MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-121 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00419946; Issue ID: MSV-3582. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/October-2025
CVE ID: CVE-2025-20718 State: PUBLISHED Published: 2025-10-14T09:11:37.980Z Last Updated: 2025-10-15T03:56:21.816Z Vendors: MediaTek, Inc. Products: MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-121 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00419945; Issue ID: MSV-3581. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/October-2025
CVE ID: CVE-2025-20719 State: PUBLISHED Published: 2025-10-14T09:11:39.767Z Last Updated: 2025-10-15T03:56:20.712Z Vendors: MediaTek, Inc. Products: MT6890, MT7603, MT7615, MT7622, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-121 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418955; Issue ID: MSV-3570. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/October-2025
CVE ID: CVE-2025-20720 State: PUBLISHED Published: 2025-10-14T09:11:41.597Z Last Updated: 2025-10-15T03:56:19.595Z Vendors: MediaTek, Inc. Products: MT6890, MT7603, MT7615, MT7622, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-122 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418954; Issue ID: MSV-3569. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/October-2025
CVE ID: CVE-2025-20721 State: PUBLISHED Published: 2025-10-14T09:11:43.313Z Last Updated: 2025-10-15T03:56:18.521Z Vendors: MediaTek, Inc. Products: MT6886, MT6897, MT6899, MT6985, MT6989, MT6991, MT8195, MT8196, MT8370, MT8390, MT8395, MT8792, MT8793 Problem Types: CWE-787 Description: In imgsensor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10089545; Issue ID: MSV-4279. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/Octo
dditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/October-2025
CVE ID: CVE-2025-20722 State: PUBLISHED Published: 2025-10-14T09:11:48.751Z Last Updated: 2025-10-14T14:04:29.983Z Vendors: MediaTek, Inc. Products: MT6835, MT6878, MT6886, MT6897, MT6899, MT6980D, MT6985, MT6989, MT6990, MT6991, MT8676, MT8678, MT8775, MT8791T, MT8796, MT8873 Problem Types: CWE-190 Description: In gnss driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09920036; Issue ID: MSV-3798. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product
; Issue ID: MSV-3798. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/October-2025
CVE ID: CVE-2025-20723 State: PUBLISHED Published: 2025-10-14T09:11:50.575Z Last Updated: 2025-10-15T03:56:15.557Z Vendors: MediaTek, Inc. Products: MT6835, MT6878, MT6886, MT6897, MT6899, MT6985, MT6989, MT6991, MT8676, MT8678, MT8775, MT8791T, MT8796, MT8873 Problem Types: CWE-787 Description: In gnss driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09920033; Issue ID: MSV-3797. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security
D: MSV-3797. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/October-2025
CVE ID: CVE-2025-20724 State: PUBLISHED Published: 2025-10-14T09:12:06.798Z Last Updated: 2025-10-14T14:03:57.815Z Vendors: MediaTek, Inc. Products: MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-125 Description: In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418894; Issue ID: MSV-3475. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/October-2025
CVE ID: CVE-2025-20725 State: PUBLISHED Published: 2025-11-04T06:19:43.569Z Last Updated: 2025-11-05T04:55:37.570Z Vendors: MediaTek, Inc. Products: MT2735, MT2737, MT6739, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6771, MT6833, MT6833P, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT8666, MT8667, MT8673, MT8675, MT8765, MT8766, MT8766R, MT8768, MT8771, MT8786, MT8788, MT8788E, MT8791, MT8791T, MT8795T,
666, MT8667, MT8673, MT8675, MT8765, MT8766, MT8766R, MT8768, MT8771, MT8786, MT8788, MT8788E, MT8791, MT8791T, MT8795T, MT8797, MT8798, MT8893 Problem Types: CWE-787 Description: In ims service, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01671924; Issue ID: MSV-4620. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/November-2025
CVE ID: CVE-2025-20726 State: PUBLISHED Published: 2025-11-04T06:19:41.827Z Last Updated: 2025-11-05T04:55:36.771Z Vendors: MediaTek, Inc. Products: MT2735, MT2737, MT6739, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6771, MT6813, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8667, MT8673, MT8675, MT8676, MT8678, MT8765, M