Browse CVEs

MEDIUM 6.0 CVE-2026-20485 In HFRP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor… Mt6993 Firmware No fix yet Fix from $1,6002026-08-03 HIGH 7.7 CVE-2026-20483 In Telephony, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no… Mt8893 Firmware No fix yet Fix from $1,9502026-08-03 MEDIUM 6.5 CVE-2026-20482 In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote (proximal/adjacent) denial of service with… Mt8532 Firmware No fix yet Fix from $1,6002026-08-03 MEDIUM 6.0 CVE-2026-20481 In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious … Mt6989 Firmware No fix yet Fix from $1,6002026-08-03 MEDIUM 5.5 CVE-2026-20480 In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution p… Mt6880 Firmware No fix yet Fix from $1,6002026-08-03 HIGH 7.5 CVE-2026-20479 In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to… Mt2735 Firmware No fix yet Fix from $1,9502026-08-03 MEDIUM 5.5 CVE-2026-20478 In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution p… Mt2735 Firmware No fix yet Fix from $1,6002026-08-03 MEDIUM 6.0 CVE-2026-20477 In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious ac… Mt8910 Firmware No fix yet Fix from $1,6002026-08-03 MEDIUM 5.5 CVE-2026-20476 In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with User execution privile… Mt6988 Firmware No fix yet Fix from $1,6002026-08-03 MEDIUM 6.0 CVE-2026-20475 In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious ac… Mt8910 Firmware No fix yet Fix from $1,6002026-08-03 MEDIUM 6.0 CVE-2026-20474 In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious acto… Mt6991 Firmware No fix yet Fix from $1,6002026-08-03 MEDIUM 6.0 CVE-2026-20473 In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has al… Mt6991 Firmware No fix yet Fix from $1,6002026-08-03 MEDIUM 6.2 CVE-2026-20470 In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no a… No fix yet Fix from $1,6002026-08-03 MEDIUM 6.0 CVE-2026-20469 In trusted_mem, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a m… No fix yet Fix from $1,6002026-08-03 MEDIUM 6.0 CVE-2026-20468 In apusys, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege if a malicious acto… No fix yet Fix from $1,6002026-08-03 MEDIUM 6.0 CVE-2026-20467 In apusys, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious… No fix yet Fix from $1,6002026-08-03 MEDIUM 6.1 CVE-2026-20466 In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalation of privilege, if an attac… No fix yet Fix from $1,6002026-08-03 HIGH 8.1 CVE-2026-20465 In wlan AP driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) escalation of… No fix yet Fix from $1,9502026-08-03 MEDIUM 6.5 CVE-2026-20464 In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege if a malicious… No fix yet Fix from $1,6002026-08-03 MEDIUM 5.3 CVE-2026-18582 A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1. This vulnerability affects the function Reporting_RCBWriteAccessHandler… Patch available Fix from $1,6002026-08-03 CRITICAL 9.3 CVE-2026-8763 In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java… Patch available Fix from $2,3002026-08-03 HIGH 7.1 CVE-2026-65875 BaserCMS provided by baserCMS Users Community contains a CSV file injection vulnerability. If a user downloads and opens a CSV file containing malici… No fix yet Fix from $1,9502026-08-03 MEDIUM 6.9 CVE-2026-59652 In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper. Patch available Fix from $1,6002026-08-03 HIGH 7.1 CVE-2026-59651 In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key. This issue also affects Bouncy Castle for J… Patch available Fix from $1,9502026-08-03 CRITICAL 9.3 CVE-2026-59650 In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS b… Patch available Fix from $2,3002026-08-03 HIGH 8.7 CVE-2026-59649 In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle … Patch available Fix from $1,9502026-08-03 MEDIUM 6.9 CVE-2026-59648 In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and passes. This issue also affects Bouncy Castle for Java L… Patch available Fix from $1,6002026-08-03 MEDIUM 6.9 CVE-2026-59647 In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours unbounded iteration count. This issue also affects Bouncy Castle for Java LTS be… Patch available Fix from $1,6002026-08-03 HIGH 8.7 CVE-2026-59646 In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length. This issue also affects Bouncy Castl… Patch available Fix from $1,9502026-08-03 HIGH 8.7 CVE-2026-59645 In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. This issue also affects Bouncy… Patch available Fix from $1,9502026-08-03