Approved changes feed: RSS · Atom

cpe:2.3:o:mediatek:mt8766_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorMediatek (eceb6b1d-81fa-55a4-b2be-fe736dad9132)
ProductMt8766 Firmware (ef511f00-33ca-5c9f-8ee7-659a2910242a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-20451 vulnerable 2026-06-08 07:49:12.249362 Details available
In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10828685; Issue ID: MSV-6504.
Published: 2026-05-04T05:42:29.660Z
Updated: 2026-05-05T03:56:05.990Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-20448 vulnerable 2026-06-08 07:49:12.136261 Details available
In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10708513; Issue ID: MSV-6281.
Published: 2026-05-04T05:41:52.927Z
Updated: 2026-05-05T03:56:07.381Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-20447 vulnerable 2026-06-08 07:49:12.125354 Details available
In geniezone, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10724073; Issue ID: MSV-6296.
Published: 2026-05-04T05:41:51.218Z
Updated: 2026-05-05T03:56:08.477Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20659 vulnerable 2026-06-08 07:08:48.916678 Details available
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01519028; Issue ID: MSV-2768.
Published: 2025-04-07T03:14:54.034Z
Updated: 2026-02-17T14:35:12.390Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.