CVE-2026-20544 (GCVE-0-2026-20544)

Vulnerability from cvelistv5 – Published: 2026-10-05 01:40 – Updated: 2026-10-05 10:53
VLAI
Summary
In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11049530 / ALPS11480843; Issue ID: MSV-7935.
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-05 10:37 UTC
CWE
Impacted products
Vendor Product Version
MediaTek, Inc. MediaTek chipset Affected: MT6739
Affected: MT6761
Affected: MT6765
Affected: MT6768
Affected: MT6769
Affected: MT6781
Affected: MT6789
Affected: MT6835
Affected: MT6853
Affected: MT6855
Affected: MT6858
Affected: MT6877
Affected: MT6878
Affected: MT6879
Affected: MT6881
Affected: MT6883
Affected: MT6885
Affected: MT6886
Affected: MT6889
Affected: MT6893
Affected: MT6895
Affected: MT6897
Affected: MT6899
Affected: MT6983
Affected: MT6985
Affected: MT6989
Affected: MT6991
Affected: MT6993
Affected: MT8126
Affected: MT8171
Affected: MT8188
Affected: MT8189
Affected: MT8195
Affected: MT8196
Affected: MT8367
Affected: MT8370
Affected: MT8390
Affected: MT8391
Affected: MT8668
Affected: MT8676
Affected: MT8678
Affected: MT8755
Affected: MT8766
Affected: MT8768
Affected: MT8775
Affected: MT8781
Affected: MT8786
Affected: MT8788
Affected: MT8791
Affected: MT8792
Affected: MT8793
Affected: MT8798
Affected: MT8799
Affected: MT8863
Affected: MT8873
Affected: MT8875
Affected: MT8883
Affected: MT8893
Affected: MT8910
Create a notification for this product.
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "PHYSICAL",
              "availabilityImpact": "HIGH",
              "baseScore": 6.8,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-20544",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-05T10:37:54.902037Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-05T10:53:47.084Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "MediaTek chipset",
          "vendor": "MediaTek, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "MT6739"
            },
            {
              "status": "affected",
              "version": "MT6761"
            },
            {
              "status": "affected",
              "version": "MT6765"
            },
            {
              "status": "affected",
              "version": "MT6768"
            },
            {
              "status": "affected",
              "version": "MT6769"
            },
            {
              "status": "affected",
              "version": "MT6781"
            },
            {
              "status": "affected",
              "version": "MT6789"
            },
            {
              "status": "affected",
              "version": "MT6835"
            },
            {
              "status": "affected",
              "version": "MT6853"
            },
            {
              "status": "affected",
              "version": "MT6855"
            },
            {
              "status": "affected",
              "version": "MT6858"
            },
            {
              "status": "affected",
              "version": "MT6877"
            },
            {
              "status": "affected",
              "version": "MT6878"
            },
            {
              "status": "affected",
              "version": "MT6879"
            },
            {
              "status": "affected",
              "version": "MT6881"
            },
            {
              "status": "affected",
              "version": "MT6883"
            },
            {
              "status": "affected",
              "version": "MT6885"
            },
            {
              "status": "affected",
              "version": "MT6886"
            },
            {
              "status": "affected",
              "version": "MT6889"
            },
            {
              "status": "affected",
              "version": "MT6893"
            },
            {
              "status": "affected",
              "version": "MT6895"
            },
            {
              "status": "affected",
              "version": "MT6897"
            },
            {
              "status": "affected",
              "version": "MT6899"
            },
            {
              "status": "affected",
              "version": "MT6983"
            },
            {
              "status": "affected",
              "version": "MT6985"
            },
            {
              "status": "affected",
              "version": "MT6989"
            },
            {
              "status": "affected",
              "version": "MT6991"
            },
            {
              "status": "affected",
              "version": "MT6993"
            },
            {
              "status": "affected",
              "version": "MT8126"
            },
            {
              "status": "affected",
              "version": "MT8171"
            },
            {
              "status": "affected",
              "version": "MT8188"
            },
            {
              "status": "affected",
              "version": "MT8189"
            },
            {
              "status": "affected",
              "version": "MT8195"
            },
            {
              "status": "affected",
              "version": "MT8196"
            },
            {
              "status": "affected",
              "version": "MT8367"
            },
            {
              "status": "affected",
              "version": "MT8370"
            },
            {
              "status": "affected",
              "version": "MT8390"
            },
            {
              "status": "affected",
              "version": "MT8391"
            },
            {
              "status": "affected",
              "version": "MT8668"
            },
            {
              "status": "affected",
              "version": "MT8676"
            },
            {
              "status": "affected",
              "version": "MT8678"
            },
            {
              "status": "affected",
              "version": "MT8755"
            },
            {
              "status": "affected",
              "version": "MT8766"
            },
            {
              "status": "affected",
              "version": "MT8768"
            },
            {
              "status": "affected",
              "version": "MT8775"
            },
            {
              "status": "affected",
              "version": "MT8781"
            },
            {
              "status": "affected",
              "version": "MT8786"
            },
            {
              "status": "affected",
              "version": "MT8788"
            },
            {
              "status": "affected",
              "version": "MT8791"
            },
            {
              "status": "affected",
              "version": "MT8792"
            },
            {
              "status": "affected",
              "version": "MT8793"
            },
            {
              "status": "affected",
              "version": "MT8798"
            },
            {
              "status": "affected",
              "version": "MT8799"
            },
            {
              "status": "affected",
              "version": "MT8863"
            },
            {
              "status": "affected",
              "version": "MT8873"
            },
            {
              "status": "affected",
              "version": "MT8875"
            },
            {
              "status": "affected",
              "version": "MT8883"
            },
            {
              "status": "affected",
              "version": "MT8893"
            },
            {
              "status": "affected",
              "version": "MT8910"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11049530 / ALPS11480843; Issue ID: MSV-7935."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-05T01:40:02.730Z",
        "orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
        "shortName": "MediaTek"
      },
      "references": [
        {
          "url": "https://www.mediatek.com/product-security-bulletin/October-2026"
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
    "assignerShortName": "MediaTek",
    "cveId": "CVE-2026-20544",
    "datePublished": "2026-10-05T01:40:02.730Z",
    "dateReserved": "2025-11-03T01:30:59.040Z",
    "dateUpdated": "2026-10-05T10:53:47.084Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-20544",
      "date": "2026-10-14",
      "epss": "0.00166",
      "percentile": "0.05471"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "MediaTek chipset",
                "vendor": "MediaTek, Inc.",
                "versions": [
                  {
                    "status": "affected",
                    "version": "MT6739"
                  },
                  {
                    "status": "affected",
                    "version": "MT6761"
                  },
                  {
                    "status": "affected",
                    "version": "MT6765"
                  },
                  {
                    "status": "affected",
                    "version": "MT6768"
                  },
                  {
                    "status": "affected",
                    "version": "MT6769"
                  },
                  {
                    "status": "affected",
                    "version": "MT6781"
                  },
                  {
                    "status": "affected",
                    "version": "MT6789"
                  },
                  {
                    "status": "affected",
                    "version": "MT6835"
                  },
                  {
                    "status": "affected",
                    "version": "MT6853"
                  },
                  {
                    "status": "affected",
                    "version": "MT6855"
                  },
                  {
                    "status": "affected",
                    "version": "MT6858"
                  },
                  {
                    "status": "affected",
                    "version": "MT6877"
                  },
                  {
                    "status": "affected",
                    "version": "MT6878"
                  },
                  {
                    "status": "affected",
                    "version": "MT6879"
                  },
                  {
                    "status": "affected",
                    "version": "MT6881"
                  },
                  {
                    "status": "affected",
                    "version": "MT6883"
                  },
                  {
                    "status": "affected",
                    "version": "MT6885"
                  },
                  {
                    "status": "affected",
                    "version": "MT6886"
                  },
                  {
                    "status": "affected",
                    "version": "MT6889"
                  },
                  {
                    "status": "affected",
                    "version": "MT6893"
                  },
                  {
                    "status": "affected",
                    "version": "MT6895"
                  },
                  {
                    "status": "affected",
                    "version": "MT6897"
                  },
                  {
                    "status": "affected",
                    "version": "MT6899"
                  },
                  {
                    "status": "affected",
                    "version": "MT6983"
                  },
                  {
                    "status": "affected",
                    "version": "MT6985"
                  },
                  {
                    "status": "affected",
                    "version": "MT6989"
                  },
                  {
                    "status": "affected",
                    "version": "MT6991"
                  },
                  {
                    "status": "affected",
                    "version": "MT6993"
                  },
                  {
                    "status": "affected",
                    "version": "MT8126"
                  },
                  {
                    "status": "affected",
                    "version": "MT8171"
                  },
                  {
                    "status": "affected",
                    "version": "MT8188"
                  },
                  {
                    "status": "affected",
                    "version": "MT8189"
                  },
                  {
                    "status": "affected",
                    "version": "MT8195"
                  },
                  {
                    "status": "affected",
                    "version": "MT8196"
                  },
                  {
                    "status": "affected",
                    "version": "MT8367"
                  },
                  {
                    "status": "affected",
                    "version": "MT8370"
                  },
                  {
                    "status": "affected",
                    "version": "MT8390"
                  },
                  {
                    "status": "affected",
                    "version": "MT8391"
                  },
                  {
                    "status": "affected",
                    "version": "MT8668"
                  },
                  {
                    "status": "affected",
                    "version": "MT8676"
                  },
                  {
                    "status": "affected",
                    "version": "MT8678"
                  },
                  {
                    "status": "affected",
                    "version": "MT8755"
                  },
                  {
                    "status": "affected",
                    "version": "MT8766"
                  },
                  {
                    "status": "affected",
                    "version": "MT8768"
                  },
                  {
                    "status": "affected",
                    "version": "MT8775"
                  },
                  {
                    "status": "affected",
                    "version": "MT8781"
                  },
                  {
                    "status": "affected",
                    "version": "MT8786"
                  },
                  {
                    "status": "affected",
                    "version": "MT8788"
                  },
                  {
                    "status": "affected",
                    "version": "MT8791"
                  },
                  {
                    "status": "affected",
                    "version": "MT8792"
                  },
                  {
                    "status": "affected",
                    "version": "MT8793"
                  },
                  {
                    "status": "affected",
                    "version": "MT8798"
                  },
                  {
                    "status": "affected",
                    "version": "MT8799"
                  },
                  {
                    "status": "affected",
                    "version": "MT8863"
                  },
                  {
                    "status": "affected",
                    "version": "MT8873"
                  },
                  {
                    "status": "affected",
                    "version": "MT8875"
                  },
                  {
                    "status": "affected",
                    "version": "MT8883"
                  },
                  {
                    "status": "affected",
                    "version": "MT8893"
                  },
                  {
                    "status": "affected",
                    "version": "MT8910"
                  }
                ]
              }
            ],
            "source": "security@mediatek.com"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8910_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A05E635E-9559-4899-A7BA-A74EB6501D1C",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8910:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8C81BC81-1358-4005-8D35-92428D052A65",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6739_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "14B94ECB-CAD4-499C-8959-1713FC5CE423",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7FA8A390-9F52-4CF3-9B45-936CE3E2B828",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6761_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2493FB05-7723-4CDD-AC2A-8B21C4285436",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F726F486-A86F-4215-AD93-7A07A071844A",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6765_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "43327018-578C-4997-81B9-6DBD3679E40C",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "43E779F6-F0A0-4153-9A1D-B715C3A2F80E",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6768_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "16EF9082-FC9B-4790-A79D-AA62C62E4B88",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "06CD97E1-8A76-48B4-9780-9698EF5A960F",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6769_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C435FED6-829E-4788-A61C-92A2250872AC",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D23991D5-1893-49F4-8A06-D5E66C96C3B3",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6781_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "23F92B7C-A5A3-4F32-B4BF-CBE706D79702",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C4EEE021-6B2A-47A0-AC6B-55525A40D718",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6789_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "524AB96D-4C15-47A6-B276-6B873796E8F3",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8B9B0D82-82C1-4A77-A016-329B99C45F49",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6835_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "00B1D726-8183-4667-B46D-18EF110EA9D9",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "19A63103-C708-48EC-B44D-5E465A6B79C5",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6853_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3EAA5C86-701B-4116-8A63-EB89B3DC2B93",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "366F1912-756B-443E-9962-224937DD7DFB",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6855_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E997ED4F-33F3-4508-9B12-99DBA0D845B2",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6858_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3BECB082-4B77-4ECC-968B-B00E48C06240",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6858:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C61AD730-66FE-4605-A89B-3B8D6526D612",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6877_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "07F67D59-75F0-4056-BCCE-F7888912CAB3",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6878_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "207954E6-D413-4762-9F4A-3A147CFB4FE2",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "855A8046-34ED-4891-ACE5-76AB10AC8D53",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6879_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "502901D0-8B2D-449A-A2D6-E8914D5D4239",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "704BE5CE-AE08-4432-A8B0-4C8BD62148AD",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6881_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "62A37FFA-30EF-4788-9EB5-E1202FA16C38",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6881:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9F7C1B31-4E33-4939-A926-79FE401368CB",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6883_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "22321E12-7EB8-46B7-ABB6-23ACC1436EFD",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "15E2EC3F-9FB3-488B-B1C1-2793A416C755",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6885_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8A6E25F4-C394-4830-8EC3-2AF0563F5032",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DD64413C-C774-4C4F-9551-89E1AA9469EE",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6886_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E10F9AFE-9F99-4B91-BF26-49E035FC8079",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AF3E2B84-DAFE-4E11-B23B-026F719475F5",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6889_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CD17D854-2394-483D-B8E2-FDA1BC837DAD",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3B787DC3-8E5A-4968-B20B-37B6257FAAE2",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6893_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0A272644-3BC4-438B-BAC0-DDF164BF4097",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "213B5C7F-D965-4312-9CDF-4F06FA77D401",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6895_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "110CBA4A-26A6-4E4E-A0C6-35FA02A6D4AF",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6897_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A04EA650-730F-4E5D-A0E0-90570CACDD5E",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2A7D8055-F4B6-41EE-A078-11D56285AB66",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6899_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BEBA484A-EC07-4D3D-80CD-BDE9E7807F71",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6983_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "967E956F-07B4-4957-9C84-DDB5C38E5E69",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6985_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CA30A145-D98E-4DA7-84C7-377402951190",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6989_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E495B8EB-C9B5-4F32-AEE2-D2C41C0B292B",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AD7DE6B2-66D9-4A3E-B15F-D56505559255",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6991_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D9DD2119-39E8-4A9C-8E2A-8FB7F92A1001",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CBBB30DF-E963-4940-B742-F6801F68C3FC",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6993_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FAEB2240-FF37-4CBE-BBEF-8A8281153646",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6993:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "57E92BE0-5E65-4770-8E1A-0E5D07A38164",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8126_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5A54A9D4-A63F-42CC-A69D-5EB23648C458",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8126:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D9BA240B-3E89-4119-9167-8BD688358065",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8171_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C81DAF70-74E7-4EBC-AE1A-63DDBAE4B6C5",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8171:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6A91AE7A-DADC-47A0-9F82-6E872F57D915",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8188_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "30E10DDB-6D3D-42CB-9DB9-ED25E6163D3D",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BA3D4A45-38EE-4125-AE67-89D1C707F95A",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8189_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "527C8F57-8492-49BF-BCA9-0D77011D3493",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8189:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AE35C440-2C15-42FF-ADD0-D99C0FB7D1C9",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8195_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C4E513B6-2909-4CA3-AF80-F1AE88BE4F18",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "ED210E64-6CE7-42B1-849E-68C0E22521F6",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8196_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EE7B4BD3-A945-4C45-8E76-CEE2ADE2001E",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8196:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FB0C4D80-28BC-4C4D-B522-AD9EC5222A2E",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8367_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "32C24935-B6E6-4923-B81C-D29BBEED2B3C",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8367:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A28FA947-314F-465B-8ADD-F7973F02D82A",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8370_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7619B640-32C6-435B-AABB-E3D11C3B03FE",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8370:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DA2B6BB9-7544-41A7-BF3A-344AA4CC4B31",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8390_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9627AD8C-49C7-43C4-850E-6BC37FA2F619",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8390:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B774B7D7-B7DD-43A0-833F-7E39DF82CA60",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8391_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "16860004-FEBE-4904-952E-222A9AFD0A2F",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8391:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "43B2824E-8D18-4DD7-91E7-41578B2FCD6C",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8668_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3EAACB56-716C-4E17-AB78-F5E68B75B791",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8668:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2589C222-3D62-4BDB-98F2-5F1E38600D8D",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8676_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "645D7C99-A0A0-4FB0-97AC-3DA5161A44D9",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EE302F6F-170E-4350-A8F4-65BE0C50CB78",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8678_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CFEC7A7B-6948-4B8A-BFA1-9F9D07043605",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "152A5F3D-8004-4649-BDB1-E6F0798AF1CB",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8755_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6B49A54E-B0C5-45C4-8396-5E6A2613E3B1",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8755:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1CF88096-5CBD-4A4B-8F47-33D38985956F",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8766_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "215862D7-BF3D-4955-BCFF-48778190EEB5",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CE45F606-2E75-48BC-9D1B-99D504974CBF",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8768_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "303069C6-F031-4176-9465-46F4134BB423",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8775_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FAA319BC-2689-497C-8D7D-482CD2AD89A1",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8775:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DE5FB550-7264-4879-BAF9-6798949113AF",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8781_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7E2280E5-F903-4541-8404-9F789CEFF172",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "533284E5-C3AF-48D3-A287-993099DB2E41",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8786_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "88A514F4-3EAF-45FB-8736-4A015E4DEB4E",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8788_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CD62F681-A2D1-4A8B-B087-7835ED500D69",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FE10C121-F2AD-43D2-8FF9-A6C197858220",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8791_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AA74322E-6A1D-4B6F-87D7-9A4CD8D14C47",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9CD2C3EC-B62D-4616-964F-FDBE5B14A449",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8792_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AE904A76-14A2-41D5-86FF-BCA686342E85",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "336FC69E-E89F-4642-B6B9-8009D9A2BD52",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8793_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "42C2F52D-C49C-4AFF-B6FA-FFA82EF96142",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8798_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C91FB79A-E095-40BB-8141-240D69CAB131",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "637CAAD2-DCC0-4F81-B781-5D0536844CA8",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8799_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BB8ADEB7-A1A3-4781-BB65-4D2AF9896F80",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8799:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "ACB27F98-6318-44C8-A28D-375A357A03CA",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8863_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "03A3F0E1-3226-4CB5-AE9F-BDA327590107",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8863:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "77E0D738-F0B9-468F-8A10-204F498320BC",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8873_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9D40337A-B78E-41CF-ADDC-A31190950F73",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8873:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D6DD525F-7050-42BD-829D-1121698B8009",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8875_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AD8A54C8-5AA0-4CDB-BC78-269693782274",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8875:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "85431E0F-9B72-4ACB-B9FB-08C7ABAC4B6A",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8883_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C5049DE8-5F0C-4E0D-85AE-F47CECE2DCE8",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8883:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "23DD8281-FEB4-4E23-8DDA-680FF895F12E",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8893_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8E905861-38DA-4023-9751-2CD2EDE489EF",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8893:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CCFAADB1-C2B2-47A6-BB66-761B964E7DFB",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11049530 / ALPS11480843; Issue ID: MSV-7935."
          }
        ],
        "id": "CVE-2026-20544",
        "lastModified": "2026-10-09T17:34:57.870",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "PHYSICAL",
                "availabilityImpact": "HIGH",
                "baseScore": 6.8,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 0.9,
              "impactScore": 5.9,
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2026-20544",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-05T10:37:54.902037Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-10-05T02:16:53.560",
        "references": [
          {
            "source": "security@mediatek.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://www.mediatek.com/product-security-bulletin/October-2026"
          }
        ],
        "sourceIdentifier": "security@mediatek.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-787"
              }
            ],
            "source": "security@mediatek.com",
            "type": "Secondary"
          }
        ]
      }
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "PHYSICAL",
                  "availabilityImpact": "HIGH",
                  "baseScore": 6.8,
                  "baseSeverity": "MEDIUM",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-20544",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-10-05T10:37:54.902037Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-10-05T10:37:51.767Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "MediaTek chipset",
              "vendor": "MediaTek, Inc.",
              "versions": [
                {
                  "status": "affected",
                  "version": "MT6739"
                },
                {
                  "status": "affected",
                  "version": "MT6761"
                },
                {
                  "status": "affected",
                  "version": "MT6765"
                },
                {
                  "status": "affected",
                  "version": "MT6768"
                },
                {
                  "status": "affected",
                  "version": "MT6769"
                },
                {
                  "status": "affected",
                  "version": "MT6781"
                },
                {
                  "status": "affected",
                  "version": "MT6789"
                },
                {
                  "status": "affected",
                  "version": "MT6835"
                },
                {
                  "status": "affected",
                  "version": "MT6853"
                },
                {
                  "status": "affected",
                  "version": "MT6855"
                },
                {
                  "status": "affected",
                  "version": "MT6858"
                },
                {
                  "status": "affected",
                  "version": "MT6877"
                },
                {
                  "status": "affected",
                  "version": "MT6878"
                },
                {
                  "status": "affected",
                  "version": "MT6879"
                },
                {
                  "status": "affected",
                  "version": "MT6881"
                },
                {
                  "status": "affected",
                  "version": "MT6883"
                },
                {
                  "status": "affected",
                  "version": "MT6885"
                },
                {
                  "status": "affected",
                  "version": "MT6886"
                },
                {
                  "status": "affected",
                  "version": "MT6889"
                },
                {
                  "status": "affected",
                  "version": "MT6893"
                },
                {
                  "status": "affected",
                  "version": "MT6895"
                },
                {
                  "status": "affected",
                  "version": "MT6897"
                },
                {
                  "status": "affected",
                  "version": "MT6899"
                },
                {
                  "status": "affected",
                  "version": "MT6983"
                },
                {
                  "status": "affected",
                  "version": "MT6985"
                },
                {
                  "status": "affected",
                  "version": "MT6989"
                },
                {
                  "status": "affected",
                  "version": "MT6991"
                },
                {
                  "status": "affected",
                  "version": "MT6993"
                },
                {
                  "status": "affected",
                  "version": "MT8126"
                },
                {
                  "status": "affected",
                  "version": "MT8171"
                },
                {
                  "status": "affected",
                  "version": "MT8188"
                },
                {
                  "status": "affected",
                  "version": "MT8189"
                },
                {
                  "status": "affected",
                  "version": "MT8195"
                },
                {
                  "status": "affected",
                  "version": "MT8196"
                },
                {
                  "status": "affected",
                  "version": "MT8367"
                },
                {
                  "status": "affected",
                  "version": "MT8370"
                },
                {
                  "status": "affected",
                  "version": "MT8390"
                },
                {
                  "status": "affected",
                  "version": "MT8391"
                },
                {
                  "status": "affected",
                  "version": "MT8668"
                },
                {
                  "status": "affected",
                  "version": "MT8676"
                },
                {
                  "status": "affected",
                  "version": "MT8678"
                },
                {
                  "status": "affected",
                  "version": "MT8755"
                },
                {
                  "status": "affected",
                  "version": "MT8766"
                },
                {
                  "status": "affected",
                  "version": "MT8768"
                },
                {
                  "status": "affected",
                  "version": "MT8775"
                },
                {
                  "status": "affected",
                  "version": "MT8781"
                },
                {
                  "status": "affected",
                  "version": "MT8786"
                },
                {
                  "status": "affected",
                  "version": "MT8788"
                },
                {
                  "status": "affected",
                  "version": "MT8791"
                },
                {
                  "status": "affected",
                  "version": "MT8792"
                },
                {
                  "status": "affected",
                  "version": "MT8793"
                },
                {
                  "status": "affected",
                  "version": "MT8798"
                },
                {
                  "status": "affected",
                  "version": "MT8799"
                },
                {
                  "status": "affected",
                  "version": "MT8863"
                },
                {
                  "status": "affected",
                  "version": "MT8873"
                },
                {
                  "status": "affected",
                  "version": "MT8875"
                },
                {
                  "status": "affected",
                  "version": "MT8883"
                },
                {
                  "status": "affected",
                  "version": "MT8893"
                },
                {
                  "status": "affected",
                  "version": "MT8910"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11049530 / ALPS11480843; Issue ID: MSV-7935."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-787",
                  "description": "CWE-787 Out-of-bounds Write",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-10-05T01:40:02.730Z",
            "orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
            "shortName": "MediaTek"
          },
          "references": [
            {
              "url": "https://www.mediatek.com/product-security-bulletin/October-2026"
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
        "assignerShortName": "MediaTek",
        "cveId": "CVE-2026-20544",
        "datePublished": "2026-10-05T01:40:02.730Z",
        "dateReserved": "2025-11-03T01:30:59.040Z",
        "dateUpdated": "2026-10-05T10:53:47.084Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…