Vendor
MediaTek, Inc.
595 known vulnerabilities in products by MediaTek, Inc., 1 of them actively exploited (CISA KEV).
Key figures
595
Vulnerabilities
1
Actively exploited (KEV)
1
Used by ransomware
64
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2026-45321 | Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys In CISA KEVRansomware | 9.6 | |
| Critical | CVE-2023-27584 | Dragonfly2 vulnerable to hard coded cyptographic key | 9.8 | |
| High | CVE-2024-21626 | runc container breakout through process.cwd trickery and leaked fds | 8.6 | |
| High | CVE-2019-5736 | The Linux Foundation runc: security vulnerability | 8.6 | |
| Critical | CVE-2010-5325 | Linux Foundation Foomatic-Filters: Heap-Based Buffer Overflow | 9.8 | |
| High | CVE-2022-46770 | MediaTek Mirage Firewall: Denial of Service | 7.5 | |
| High | CVE-2021-30465 | The Linux Foundation runc: Path Traversal | 8.5 | |
| High | CVE-2022-23648 | Insecure handling of image volumes in containerd CRI plugin | 7.5 | |
| Critical | CVE-2021-23450 | Prototype Pollution | 7.5 | |
| Critical | CVE-2025-32434 | PyTorch: `torch.load` with `weights_only=True` leads to remote code execution | 9.8 | |
| Critical | CVE-2019-1010245 | The Linux Foundation ONOS SDN Controller: Improper Input Validation | 9.8 | |
| High | CVE-2023-24805 | Command injection in cups-filters | 8.8 | |
| High | CVE-2022-46463 | Harbor: security vulnerability | 7.5 | |
| High | CVE-2026-88064 | Backstage: Improper input validation in TechDocs MkDocs configuration | 8.8 | |
| Medium | CVE-2019-16097 | Harbor: security vulnerability | 6.5 | |
| Critical | CVE-2021-43832 | Improper Access Control in spinnaker | 10.0 | |
| Critical | CVE-2026-104252 | Vitess vttablet /twopcz reflected XSS | 9.8 | |
| High | CVE-2015-8560 | Linux Foundation cups-filters: security vulnerability | 7.3 | |
| Critical | CVE-2020-26892 | Linux Foundation NATS (NATS Server): Improper Access Control | 9.8 | |
| High | CVE-2022-38817 | MediaTek Dapr Dashboard: Improper Access Control | 7.5 | |
| High | CVE-2019-16884 | The Linux Foundation runc: security vulnerability | 7.5 | |
| High | CVE-2020-5258 | Prototype pollution in dojo | 7.7 | |
| High | CVE-2020-28466 | Denial of Service (DoS) | 7.5 | |
| Critical | CVE-2024-48063 | MediaTek Pytorch: Deserialization of Untrusted Data | 9.8 | |
| High | CVE-2022-31020 | Remote code execution in Indy's NODE_UPGRADE transaction | 8.8 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 27sans-atrisk-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 26sans-atrisk-mail,
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 20sans-atrisk,
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 19sans-atrisk,