GCVE - cpe:2.3:o:mediatek:mt8893_firmware:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:mediatek:mt8893_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

Vendor	Mediatek (`eceb6b1d-81fa-55a4-b2be-fe736dad9132`)
Product	Mt8893 Firmware (`7b64468c-7c38-5109-838f-c295064a93ef`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-20451`	vulnerable	2026-06-08 07:49:12.250798	Details available In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10828685; Issue ID: MSV-6504. Published: 2026-05-04T05:42:29.660Z Updated: 2026-05-05T03:56:05.990Z Open on db.gcve.eu Reference links https://corp.mediatek.com/product-security-bulletin/May-2026	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-20450`	vulnerable	2026-06-08 07:49:12.204929	Details available In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01753620; Issue ID: MSV-6100. Published: 2026-05-04T05:41:56.258Z Updated: 2026-05-04T12:59:48.327Z Open on db.gcve.eu Reference links https://corp.mediatek.com/product-security-bulletin/May-2026	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-20449`	vulnerable	2026-06-08 07:49:12.191092	Details available In Modem, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01760138; Issue ID: MSV-6148. Published: 2026-05-04T05:41:54.581Z Updated: 2026-05-04T12:59:15.818Z Open on db.gcve.eu Reference links https://corp.mediatek.com/product-security-bulletin/May-2026	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-20448`	vulnerable	2026-06-08 07:49:12.154003	Details available In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10708513; Issue ID: MSV-6281. Published: 2026-05-04T05:41:52.927Z Updated: 2026-05-05T03:56:07.381Z Open on db.gcve.eu Reference links https://corp.mediatek.com/product-security-bulletin/May-2026	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-20433`	vulnerable	2026-06-08 07:49:11.967944	Details available In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01088681; Issue ID: MSV-4460. Published: 2026-04-07T03:25:32.066Z Updated: 2026-04-08T03:55:26.543Z Open on db.gcve.eu Reference links https://corp.mediatek.com/product-security-bulletin/April-2026	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-20432`	vulnerable	2026-06-08 07:49:11.865118	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.