MediaTek LR12A vulnerabilities

17 CVEs affecting MediaTek LR12A, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-20434, published 2026-03-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-20154, published 2025-01-06. High severity, CVSS 8.8. EPSS: 3.9% chance of exploitation in the next 30 days. In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution, if a UE has connected to a rogue base station controlled by the attacker,…
CVE-2022-21744, published 2022-07-06. Critical severity, CVSS 9.8. EPSS: 3.4% chance of exploitation in the next 30 days. In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding GPRS Packet Neighbour Cell Data (PNCD) improper…
CVE-2022-20083, published 2022-07-06. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. In Modem 2G/3G CC, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding combined FACILITY with no additional execution…
CVE-2022-26446, published 2022-11-08. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. In Modem 4G RRC, there is a possible system crash due to improper input validation. This could lead to remote denial of service, when concatenating improper SIB12 (CMAS message), with no additional…
CVE-2024-20039, published 2024-04-01. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. In modem protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is…
CVE-2024-20150, published 2025-01-06. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for…
CVE-2024-20077, published 2024-07-01. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed…
CVE-2024-20076, published 2024-07-01. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed…
CVE-2021-40148, published 2022-01-04. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. In Modem EMM, there is a possible information disclosure due to a missing data encryption. This could lead to remote information disclosure with no additional execution privileges needed. User…
CVE-2023-20819, published 2023-10-02. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. In CDMA PPP protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privilege needed. User…

Latest

CVE-2026-20434, published 2026-03-02. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the…
CVE-2025-20727, published 2025-11-04. High severity, CVSS 8.1. EPSS: 0.6% chance of exploitation in the next 30 days. In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the…
CVE-2025-20726, published 2025-11-04. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the…
CVE-2025-20725, published 2025-11-04. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. In ims service, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by…
CVE-2025-20678, published 2025-06-02. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. In ims service, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the…
CVE-2025-20667, published 2025-05-05. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. In Modem, there is a possible information disclosure due to incorrect error handling. This could lead to remote information disclosure, if a UE has connected to a rogue base station controlled by the…