rainbutterfly/cve_corpus huggingface dataset:
CVE-2026-20418 
In Thread, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00465153; Issue ID: MSV-4927.
Problem types: cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-02-02T08:15:15.670Z
CVE-2026-20419 
In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught exception. This could lead to remote (proximal/adjacent) denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00461663 /  WCNCR00463309; Issue ID: MSV-4852.
Problem types: cwe_id: CWE-754
description: CWE-754 Improper Check for Unusual or Exceptional Conditions
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-02-02T08:16:46.837Z
CVE-2026-20420 
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01738313; Issue ID: MSV-5935.
Problem types: cwe_id: CWE-125
description: CWE-125 Out-of-bounds Read
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-02-02T08:14:32.385Z
CVE-2026-20421 
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01738293; Issue ID: MSV-5922.
Problem types: cwe_id: CWE-125
description: CWE-125 Out-of-bounds Read
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-02-02T08:14:41.044Z
CVE-2026-20422 
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00827332; Issue ID: MSV-5919.
Problem types: cwe_id: CWE-617
description: CWE-617 Reachable Assertion
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-02-02T08:14:43.190Z
CVE-2026-20423 
In wlan STA driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00465314; Issue ID: MSV-4956.
Problem types: cwe_id: CWE-749
description: CWE-749 Exposed Dangerous Method or Function
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-03-02T08:37:41.026Z
CVE-2026-20424 
In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5540.
Problem types: cwe_id: CWE-125
description: CWE-125 Out-of-bounds Read
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-03-02T08:39:31.764Z
CVE-2026-20425 
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5539.
Problem types: cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-03-02T08:38:59.609Z
CVE-2026-20426 
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5538.
Problem types: cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-03-02T08:39:01.872Z
CVE-2026-20427 
In display, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5537.
Problem types: cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-03-02T08:39:04.059Z
CVE-2026-20428 
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5536.
Problem types: cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-03-02T08:39:06.062Z
CVE-2026-20429 
In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5535.
Problem types: cwe_id: CWE-125
description: CWE-125 Out-of-bounds Read
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-03-02T08:39:33.758Z
CVE-2026-20430 
In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00467553; Issue ID: MSV-5151.
Problem types: cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-03-02T08:39:08.082Z
CVE-2026-20431 
In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01106496; Issue ID: MSV-4467.
Problem types: cwe_id: CWE-770
description: CWE-770 Allocation of Resources Without Limits or Throttling
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-04-07T03:25:28.491Z
CVE-2026-20432 
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01406170; Issue ID: MSV-4461.
Problem types: cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-04-07T03:25:30.263Z
CVE-2026-20433 
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01088681; Issue ID: MSV-4460.
Problem types: cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-04-07T03:25:32.066Z
CVE-2026-20434 
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY00782946; Issue ID: MSV-4135.
Problem types: cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-03-02T08:39:10.077Z
CVE-2026-20435 
In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10607099; Issue ID: MSV-6118.
Problem types: cwe_id: CWE-522
description: CWE-522 Insufficiently Protected Credentials
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-03-02T08:39:12.070Z
CVE-2026-20436 
In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00473802; Issue ID: MSV-5970.
Problem types: cwe_id: CWE-120
description: CWE-120 Classic Buffer Overflow
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-03-02T08:39:13.985Z
CVE-2026-20437 
In MAE, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431940; Issue ID: MSV-5843.
Problem types: cwe_id: CWE-416
description: CWE-416 Use After Free
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-03-02T08:39:16.000Z
CVE-2026-20438 
In MAE, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431920; Issue ID: MSV-5835.
Problem types: cwe_id: CWE-367
description: CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-03-02T08:39:17.978Z
CVE-2026-20439 
In imgsys, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431955; Issue ID: MSV-5826.
Problem types: cwe_id: CWE-416
description: CWE-416 Use After Free
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-03-02T08:39:19.895Z
CVE-2026-20440 
In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431968; Issue ID: MSV-5824.
Problem types: cwe_id: CWE-1285
description: CWE-1285 Specified Index, Position, or Offset
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-03-02T08:39:21.831Z
CVE-2026-20441 
In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10432500; Issue ID: MSV-5803.
Problem types: cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-03-02T08:39:23.774Z
CVE-2026-20442 
In display, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10436998; Issue ID: MSV-5723.
Problem types: cwe_id: CWE-416
description: CWE-416 Use After Free
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-03-02T08:39:25.755Z
CVE-2026-20443 
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10436998; Issue ID: MSV-5722.
Problem types: cwe_id: CWE-416
description: CWE-416 Use After Free
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-03-02T08:39:27.755Z
CVE-2026-20444 
In display, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10436995; Issue ID: MSV-5721.
Problem types: cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-03-02T08:39:29.734Z
CVE-2026-20445 
In MDDP, there is a possible system crash due to a race condition. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10289875; Issue ID: MSV-5184.
Problem types: cwe_id: CWE-367
description: CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-03-02T08:39:35.796Z
CVE-2026-20446 
In sec boot, there is a possible out of bounds write due to an integer overflow. This could lead to local denial of service, if an attacker has physical access to the device, with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09963054; Issue ID: MSV-3899.
Problem types: cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-04-07T03:25:39.747Z
CVE-2026-20447 
In geniezone, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10724073; Issue ID: MSV-6296.
Problem types: cwe_id: CWE-125
description: CWE-125 Out-of-bounds Read
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-05-04T05:41:51.218Z
CVE-2026-20448 
In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10708513; Issue ID: MSV-6281.
Problem types: cwe_id: CWE-280
description: CWE-280 Improper Handling of Insufficient Permissions or Privileges
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-05-04T05:41:52.927Z
CVE-2026-20449 
In Modem, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01760138; Issue ID: MSV-6148.
Problem types: cwe_id: CWE-120
description: CWE-120 Classic Buffer Overflow
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-05-04T05:41:54.581Z
CVE-2026-20450 
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01753620; Issue ID: MSV-6100.
Problem types: cwe_id: CWE-617
description: CWE-617 Reachable Assertion
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-05-04T05:41:56.258Z
CVE-2026-20451 
In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10828685; Issue ID: MSV-6504.
Problem types: cwe_id: CWE-843
description: CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-05-04T05:42:29.660Z
CVE-2026-20452 
In wlan AP driver, there is a possible memory corruption due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00480138; Issue ID: MSV-6295.
Problem types: cwe_id: CWE-122
description: CWE-122 Heap Overflow
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-06-01T03:20:08.315Z
CVE-2026-20453 
In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10886526; Issue ID: MSV-6791.
Problem types: cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-06-01T03:20:09.951Z
CVE-2026-20454 
In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10873936; Issue ID: MSV-6786.
Problem types: cwe_id: CWE-367
description: CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-06-01T03:20:11.445Z
CVE-2026-20455 
In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10873936; Issue ID: MSV-6784.
Problem types: cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-06-01T03:20:12.838Z
CVE-2026-20456 
In wlan STA driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00480851; Issue ID: MSV-6338.
Problem types: cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: MediaTek, Inc.
product: MediaTek chipset
default_status: unaffected
Published: 2026-06-01T03:20:14.379Z
CVE-2026-20601 
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.3. An app may be able to monitor keystrokes without user permission.
Problem types: description: An app may be able to monitor keystrokes without user permission
Affected products: vendor: Apple
product: macOS
Published: 2026-02-11T22:58:24.584Z
CVE-2026-20602 
The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may be able to cause a denial-of-service.
Problem types: description: An app may be able to cause a denial-of-service
Affected products: vendor: Apple
product: macOS
Published: 2026-02-11T22:58:38.199Z
CVE-2026-20603 
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Tahoe 26.3. An app with root privileges may be able to access private information.
Problem types: description: An app with root privileges may be able to access private information
Affected products: vendor: Apple
product: macOS
Published: 2026-02-11T22:58:38.996Z
CVE-2026-20605 
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may be able to crash a system process.
Problem types: description: An app may be able to crash a system process
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
Published: 2026-02-11T22:59:03.734Z
CVE-2026-20606 
This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may be able to bypass certain Privacy preferences.
Problem types: description: An app may be able to bypass certain Privacy preferences
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
Published: 2026-02-11T22:58:00.743Z
CVE-2026-20607 
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to access protected user data.
Problem types: description: An app may be able to access protected user data
Affected products: vendor: Apple
product: macOS
Published: 2026-03-25T00:31:50.881Z
CVE-2026-20608 
This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. Processing maliciously crafted web content may lead to an unexpected process crash.
Problem types: description: Processing maliciously crafted web content may lead to an unexpected process crash
Affected products: vendor: Apple
product: Safari
vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
vendor: Apple
product: visionOS
Published: 2026-02-11T22:58:59.749Z
CVE-2026-20609 
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents.
Problem types: description: Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: visionOS
vendor: Apple
product: watchOS
Published: 2026-02-11T22:59:00.856Z
CVE-2026-20610 
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26.3. An app may be able to gain root privileges.
Problem types: description: An app may be able to gain root privileges
Affected products: vendor: Apple
product: macOS
Published: 2026-02-11T22:58:02.574Z