These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A memory corruption vulnerability exists in the geniezone component of Mediatek devices. This issue, tracked as CVE-2025-20802, could allow local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not required for exploitation. The vulnerability has been assigned a CVSS score of 6.7 and a severity of MEDIUM.
A high-severity CVE-2025-20801 vulnerability exists in the seninf component, potentially leading to local privilege escalation if a malicious actor has obtained System privilege. User interaction is not required for exploitation. The CVE was published on 2026-01-06T02:15:44.190Z and last modified on 2026-09-30T23:10:00.237Z. This vulnerability could allow an attacker to elevate privileges, potentially lea [truncated]
A high-severity CVE-2025-20800 vulnerability exists in MediaTek's mminfra component, potentially allowing local privilege escalation if a malicious actor has already obtained System privilege. The CVE was published on 2026-01-06T02:15:44.060Z and last modified on 2026-09-30T23:10:00.237Z. This vulnerability has a CVSS score of 7.8 and requires no user interaction for exploitation. Affected deployments req [truncated]
A high-severity CVE-2025-20799 vulnerability exists in c2ps, potentially leading to local escalation of privilege. The issue arises from a use-after-free error and requires System privileges for exploitation. User interaction is not necessary. Affected versions and patches are detailed in vendor advisories. This vulnerability has a CVSS score of 7.8 and is classified as HIGH severity. System administrator [truncated]
A high-severity CVE-2025-20798 vulnerability exists in the Mediatek battery component, allowing for potential local escalation of privilege if a malicious actor has obtained System privilege. The issue arises from a missing bounds check, enabling an out-of-bounds write. User interaction is not required for exploitation. This vulnerability affects Android devices with Mediatek chipsets, particularly those [truncated]
CVE-2025-20797 is a high-severity vulnerability in the Mediatek battery component, allowing for local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. The vulnerability is caused by a missing bounds check in the Mediatek battery component. Defenders responsible for Mediatek-based Android systems, particularly those usi [truncated]
A high-severity CVE-2025-20796 vulnerability exists in Mediatek's imgsys component. Local escalation of privilege is possible if a malicious actor has already obtained System privilege, requiring user interaction for exploitation. The CVE was published on 2026-01-06T02:15:43.567Z and last modified on 2026-09-30T23:10:00.237Z. This vulnerability allows for an out-of-bounds write due to improper input valid [truncated]
A possible out of bounds write due to a missing bounds check in KeyInstall could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. This vulnerability is located in the KeyInstall component and its exploitation could lead to increased access to sensitive data, allowing malicious actors to execute arbitrary [truncated]
A potential system crash due to improper input validation in Mediatek's Modem could lead to remote denial of service if a UE has connected to a rogue base station controlled by the attacker. This issue requires no additional execution privileges and no user interaction for exploitation. The vulnerability affects Mediatek-based systems, particularly those using affected Modem versions. Defenders should ass [truncated]
PatchSiren debrief for CVE-2025-20793: A possible system crash due to incorrect error handling in Mediatek's Modem component could lead to remote denial of service if a UE has connected to a rogue base station controlled by the attacker. This vulnerability affects Mediatek's NR15, NR16, and NR17 components, which are used in various systems for connectivity. Defenders responsible for Mediatek-based system [truncated]
CVE-2025-20787 is a use-after-free vulnerability in the display component of Mediatek devices. This vulnerability could lead to local escalation of privilege if a malicious actor has already obtained System privilege. User interaction is not required for exploitation. The vulnerability was patched as part of Mediatek's January 2026 security bulletin. Defenders should assess exposure and apply patches to p [truncated]
CVE-2025-20786 is a use-after-free vulnerability in the display component of Mediatek devices. This vulnerability could lead to local privilege escalation if a malicious actor has already obtained System privileges. User interaction is not required for exploitation. The vulnerability exists in the display component, which is a critical part of the system. A successful exploit could allow an attacker to ga [truncated]
CVE-2025-20785 is a use-after-free vulnerability in the display component of Mediatek devices. This vulnerability could lead to local escalation of privilege if a malicious actor has already obtained System privilege. User interaction is not required for exploitation. The vulnerability affects Mediatek devices, and defenders managing these devices, especially those with System privilege escalation risk, s [truncated]
CVE-2025-20784 is a local privilege escalation vulnerability in the display component of Mediatek devices. An attacker with System privileges can exploit this vulnerability to gain elevated privileges. The CVE was published on 2026-01-06T02:15:42.673Z and last modified on 2026-09-30T22:10:00.273Z. This vulnerability requires System privileges to exploit and affects Mediatek devices. Android device adminis [truncated]
CVE-2025-20783 is a medium-severity vulnerability affecting Google Android and Mediatek products. An out-of-bounds write issue in the display component could allow local privilege escalation if a malicious actor has already obtained System privileges. User interaction is not required for exploitation. The vulnerability exists in the display component of Mediatek chipsets used in Google Android systems. De [truncated]
A potential out of bounds write vulnerability exists in the display component of MediaTek chipsets. This issue could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not required for exploitation. The vulnerability affects Android versions 14.0, 15.0, and 16.0, and defenders should assess exposure and apply patches accordingly. Addit [truncated]
CVE-2025-20781 is a high-severity vulnerability in the display component of Mediatek's products, potentially leading to local escalation of privilege. The vulnerability has a CVSS score of 7.8 and requires System privileges for exploitation, which could be obtained through other means. No user interaction is needed for exploitation. This vulnerability affects Mediatek-based systems, particularly those wit [truncated]
CVE-2025-20780 is a high-severity vulnerability in the display component of Mediatek's products, potentially leading to local escalation of privilege. The vulnerability has a CVSS score of 7.8 and requires System privileges for exploitation, which can be obtained by a malicious actor. No user interaction is needed for exploitation. This vulnerability affects Mediatek-based devices, especially those with S [truncated]
CVE-2025-20779 is a high-severity vulnerability in the display component of Mediatek's products, potentially allowing local escalation of privilege if a malicious actor has already obtained the System privilege. The vulnerability is caused by a race condition leading to a use-after-free issue. User interaction is not required for exploitation. This vulnerability affects Mediatek-based products and require [truncated]
CVE-2025-20778 is a high-severity vulnerability in the display component of Mediatek's products, potentially allowing local escalation of privilege if a malicious actor has already obtained the System privilege. The vulnerability has a CVSS score of 7.8 and requires no user interaction for exploitation. Affected product deployments should be assessed for exposure, and owners should prioritize patching bas [truncated]
A potential system crash in MediaTek chipsets could lead to remote denial of service if a device connects to a rogue base station controlled by an attacker. This issue, tracked as CVE-2025-20762, is caused by incorrect error handling in the modem and requires no user interaction or additional execution privileges to exploit. The vulnerability has a CVSS score of 6.5 and is classified as Medium severity.
A vulnerability in Mediatek's Modem could lead to a system crash due to incorrect error handling if a device connects to a rogue base station controlled by an attacker. This issue requires no additional execution privileges and no user interaction for exploitation. The vulnerability affects Mediatek-based devices, particularly those in environments where connections to untrusted or rogue base stations are [truncated]
CVE-2025-20760 is a medium-severity vulnerability in Mediatek's Modem component. An uncaught exception can lead to the reading of uninitialized heap data, potentially causing a remote denial of service if a device connects to a rogue base station controlled by an attacker. No user interaction or additional privileges are required for exploitation. The vulnerability has a CVSS score of 6.5 and is classifie [truncated]