CVE Tools

MT8791T Firmware

23 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for MT8791T Firmware, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

MT8791T Firmware CVEs per month

Oct 2024 to Sep 2026. Point at a month, or focus the strip and use the arrow keys.
MT8791T Firmware CVEs per month
MonthCVEs
2024-100
2024-110
2024-120
2025-010
2025-020
2025-030
2025-041
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-042
2026-055
2026-063
2026-070
2026-0810
2026-092

Severity

How the 23 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • High417%
  • Medium1983%

Latest CVEs

The 15 most recently published vulnerabilities affecting MT8791T Firmware.

  1. CVE-2026-20504In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with...5.3
  2. CVE-2026-20503In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with...5.3
  3. CVE-2026-20498In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System pr...6.0
  4. CVE-2026-20496In geniezone, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. U...4.4
  5. CVE-2026-20489In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. Us...4.4
  6. CVE-2026-20488In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege....4.4
  7. CVE-2026-20481In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege....6.0
  8. CVE-2026-20497In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege....6.0
  9. CVE-2026-20479In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker...7.5
  10. CVE-2026-20475In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. U...6.0
  11. CVE-2026-20474In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. Use...6.0
  12. CVE-2026-20473In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User intera...6.0
  13. CVE-2026-20455In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege....7.8
  14. CVE-2026-20454In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User ...6.4
  15. CVE-2026-20453In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege....6.7

Product grouping is registry-driven, with AI assist and human review. How it works

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store