Skip to content

MediaTek, Inc. · weakness class

File and Path Handling

8 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

  1. In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtaine…CVE-2026-20513MediaTek, Inc. · CVSS 4.4 · 0.2% likely

    CWE-35

  2. In aee daemon, there is a possible information disclosure due to symbolic link following. This could lead to local information disclosure with System execution privileges needed.…CVE-2022-20103MediaTek, Inc. · 0.1% likely

    CWE-59

  3. In connsyslogger, there is a possible symbolic link following due to improper link resolution. This could lead to local escalation of privilege with System execution privileges ne…CVE-2022-20050MediaTek, Inc. · 0.1% likely

    CWE-59

  4. In aee daemon, there is a possible information disclosure due to a path traversal. This could lead to local information disclosure with no additional execution privileges needed.…CVE-2022-20101MediaTek, Inc. · 0.1% likely

    CWE-22

  5. In sound driver, there is a possible information disclosure due to symlink following. This could lead to local information disclosure with System execution privileges needed. User…CVE-2022-21770MediaTek, Inc. · 0.1% likely

    CWE-59

  6. In netdiag, there is a possible symbolic link following due to an improper link resolution. This could lead to local escalation of privilege with System execution privileges neede…CVE-2022-20085MediaTek, Inc. · 0.1% likely

    CWE-59

  7. In mobile_log_d, there is a possible symbolic link following due to an improper link resolution. This could lead to local escalation of privilege with System execution privileges…CVE-2022-20068MediaTek, Inc. · 0.1% likely

    CWE-59

  8. In vow, there is a possible information disclosure due to a symbolic link following. This could lead to local information disclosure with System execution privileges needed. User…CVE-2022-26456MediaTek, Inc. · 0.1% likely

    CWE-59

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.