MediaTek, Inc. MediaTek chipset
At a glance
- Source
- NVD
- EPSS
- EPSS 0.13 % · percentile 2 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- MediaTek
- NVD status
- Analyzed
Description
In apu, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249016; Issue ID: MSV-9169.
Weaknesses (CWE)
- CWE-416 — Use After Free
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 8.4 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | CISA-ADP |
| CVSS 3.1 | HIGH 8.4 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | NVD · 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary) |
European references
- ENISA EUVD · EUVD-2026-92192
- GCVE · GCVE-0-2026-20531
Affected configurations (NVD CPE)
cpe:2.3:o:mediatek:mt8910_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt6899_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt6993_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8668_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8781_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8793_firmware:-:*:*:*:*:*:*:*
Affected products
| Product | Versions |
|---|---|
| MediaTek, Inc. · MediaTek chipset | affected MT6899 ; affected MT6993 ; affected MT8668 ; affected MT8781 ; affected MT8793 ; affected MT8910 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |