Known vulnerabilities in MT7922

Vendor: MediaTek
Software: MT7922
Software CPE: cpe:2.3:a:mediatek:mt7922:*:*:*:*:*:*:*:*
Website: https://www.mediatek.com/
Total vulnerabilities: 20
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MT7922 MT7922 is affected by 20 known vulnerabilities: 2 high, 18 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU133131 - Out-of-bounds write
CVE-2026-20456		 CWE-787 Low
No
No
 - 01.06.2026 SB2026060153
#VU123446 - Exposed Dangerous Method or Function
CVE-2026-20423		 CWE-749 Low
No
No
 - 03.03.2026 SB2026030335
#VU123454 - Buffer overflow
CVE-2026-20436		 CWE-120 Low
No
No
 - 03.03.2026 SB2026030335
#VU122193 - Out-of-bounds write
CVE-2026-20407		 CWE-787 Low
No
No
 - 02.02.2026 SB2026020265
#VU122204 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-20419		 CWE-754 Low
No
No
 - 02.02.2026 SB2026020265
#VU117896 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-20740		 CWE-367 Low
No
No
 - 03.11.2025 SB2025110309
SB2025122705
SB2026010555
#VU117891 - Heap-based Buffer Overflow
CVE-2025-20728		 CWE-122 Low
No
No
 - 03.11.2025 SB2025110309
SB2025122705
SB2026010555
#VU112453 - Heap-based Buffer Overflow
CVE-2025-20680		 CWE-122 Low
No
No
 - 08.07.2025 SB2025070835
SB2025072842
#VU112460 - Out-of-bounds read
CVE-2025-20687		 CWE-125 Low
No
No
 - 08.07.2025 SB2025070835
SB2025072842
#VU112466 - Out-of-bounds read
CVE-2025-20693		 CWE-125 Low
No
No
 - 08.07.2025 SB2025070835
SB2025072843
#VU110029 - Heap-based Buffer Overflow
CVE-2025-20672		 CWE-122 Low
No
No
 - 02.06.2025 SB2025060229
SB2025061259
#VU110030 - NULL Pointer Dereference
CVE-2025-20673		 CWE-476 Low
No
No
 - 02.06.2025 SB2025060229
SB2025061258
#VU110032 - NULL Pointer Dereference
CVE-2025-20675		 CWE-476 Low
No
No
 - 02.06.2025 SB2025060229
SB2025061258
#VU110033 - NULL Pointer Dereference
CVE-2025-20676		 CWE-476 Low
No
No
 - 02.06.2025 SB2025060229
SB2025061258
#VU110034 - NULL Pointer Dereference
CVE-2025-20677		 CWE-476 Low
No
No
 - 02.06.2025 SB2025060229
SB2025061259
#VU103574 - Reachable Assertion
CVE-2024-20147		 CWE-617 Low
No
No
 - 04.02.2025 SB2025020401
SB2025051629
#VU102351 - Reachable Assertion
CVE-2024-20152		 CWE-617 Low
No
No
 - 06.01.2025 SB2025010635
#VU102345 - Out-of-bounds write
CVE-2024-20146		 CWE-787 High
No
No
 - 06.01.2025 SB2025010635
SB2025010645
SB20251114104
#VU102346 - Out-of-bounds write
CVE-2024-20148		 CWE-787 High
No
No
 - 06.01.2025 SB2025010635
SB2025010645
SB2025072837
and 1 more
#VU87948 - Improper input validation
CVE-2024-20040		 CWE-20 Low
No
No
 - 01.04.2024 SB2024040143
SB2024040144