Mediatek Mt8668 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Mediatek Mt8668 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (16)

• CVE-2026-20433 — CVSS 8.8 (high): In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE…
• CVE-2026-20502 — CVSS 8.4 (high): In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no…
• CVE-2026-20501 — CVSS 8.4 (high): In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no…
• CVE-2026-20432 — CVSS 8.0 (high): In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE…
• CVE-2026-20449 — CVSS 6.5 (medium): In Modem, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service, if a UE has…
• CVE-2026-20450 — CVSS 6.5 (medium): In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has…
• CVE-2026-20431 — CVSS 6.5 (medium): In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a…
• CVE-2026-20477 — CVSS 6.0 (medium): In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a…
• CVE-2026-20473 — CVSS 6.0 (medium): In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious…
• CVE-2026-20474 — CVSS 6.0 (medium): In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a…
• CVE-2026-20475 — CVSS 6.0 (medium): In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a…
• CVE-2026-20500 — CVSS 5.5 (medium): In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution…
• CVE-2026-20503 — CVSS 5.3 (medium): In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has…
• CVE-2026-20489 — CVSS 4.4 (medium): In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a…
• CVE-2026-20488 — CVSS 4.4 (medium): In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a…
• CVE-2026-20484 — CVSS 4.4 (medium): In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a…