Skip to content
Sign in

MediaTek, Inc. product

chipset

Alert
No chipset CVE is in the CISA KEV catalogue.

Tracked since 12 Mar · latest article 2 Nov · RSS · API

0Open KEV deadlines

None open

0Added to KEV · 90 days

of 0 in the full CISA catalogue · all time

0High exploit odds · current

EPSS top 5%, not in KEV

1Articles · 7 days

usual rate

Exploited, by due date

No chipset CVE is in the CISA KEV catalogue.

Patch cadence and exploit odds

How often CISA adds chipset CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

CISA has not added a chipset CVE to KEV.

Fix listed

0 of 10 CVEs in coverage

10 CVEs have no vendor fix recorded yet.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2026-20586: 33.1th percentileCVE-2026-20519: 13.6th percentileCVE-2026-20520: 13.6th percentileCVE-2026-20525: 10.6th percentileCVE-2026-20527: 10.6th percentileCVE-2026-20435: 1.9th percentile050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2026-2058633.1
CVE-2026-2051913.6
CVE-2026-2052013.6
CVE-2026-2052510.6
CVE-2026-2052710.6
CVE-2026-204351.9

Coverage3 articles · all time

The latest 3 articles naming chipset, in the shared story grammar.

Full timeline
Developinglatest 2 hours ago3 articles2 outlets

3 articles from 2 outlets since 12 Mar. Picked up again today after 4 weeks quiet.

Now12 Mar3 Oct7911141720232629First reportMalwarebytes · 12 Mar, 13:40Picked up againafter 30 weeks quietPicked up againafter 4 weeks quiet
  • Thu 12 Mar, 13:40 UTC. Malwarebytes, first report. This Android vulnerability can break your lock screen in under 60 seconds.
  • Mon 5 Oct, 09:59 UTC. SecurityOnline, its first report on the story. MediaTek Patches Critical Modem Flaws Enabling Rogue Base Station Attacks.
  • Mon 2 Nov, 10:30 UTC. SecurityOnline. MediaTek patches 57 flaws, including six critical modem bugs.
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 3 articles as a list
  1. Thu 12 MarDay 01
    1. This Android vulnerability can break your lock screen in under 60 seconds13:40 · Malwarebytes · First report

  2. Quiet for 30 weeks

    Mon 5 OctDay 2071
    1. MediaTek Patches Critical Modem Flaws Enabling Rogue Base Station Attacks09:59 · SecurityOnline · Picked up again

  3. Quiet for 4 weeks

    Mon 2 NovDay 2351
    1. MediaTek patches 57 flaws, including six critical modem bugs10:30 · SecurityOnline · Picked up again

All CVEs in coverage10

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2026-20586

    MediaTek, Inc. MediaTek chipset vulnerability

    Not scored0.4% EPSS · 1 article
  • CVE-2026-20519

    MediaTek, Inc. MediaTek chipset vulnerability

    Not scored0.2% EPSS · 1 article
  • CVE-2026-20520

    MediaTek, Inc. MediaTek chipset vulnerability

    Not scored0.2% EPSS · 1 article
  • CVE-2026-20525

    MediaTek, Inc. MediaTek chipset vulnerability

    Not scored0.2% EPSS · 0 articles
  • CVE-2026-20527

    MediaTek, Inc. MediaTek chipset vulnerability

    Not scored0.2% EPSS · 1 article
  • CVE-2026-20435

    MediaTek, Inc. MediaTek chipset vulnerability

    Not scored0.1% EPSS · 1 article
  • CVE-2026-20552

    MediaTek, Inc. MediaTek chipset vulnerability

    Not scored1 article
  • CVE-2026-20563

    MediaTek, Inc. MediaTek chipset vulnerability

    Not scored1 article
  • CVE-2026-20562

    MediaTek, Inc. MediaTek chipset vulnerability

    Not scored1 article
  • CVE-2026-20499

    MediaTek, Inc. MediaTek chipset vulnerability

    Not scored1 article
CyberSIXTSignal over noise
Updated AboutDevelopersSign in