Skip to content
Threat Feed
Subscribe

Vendor

MediaTek

5 briefs RSS
critical advisory

Android November 2026 Security Updates

Google’s November 2026 security updates for Android patch over 200 vulnerabilities, including a critical remote code execution flaw in the Framework component (CVE-2026-58868).

exploited PoC Android +2 mobile vulnerability-patch rce
1c updated
high advisory

Midnight Mimosa Pre-installed Malware Campaign

The Midnight Mimosa campaign utilizes platform-signed, pre-installed malware on low-cost MediaTek Android devices to execute ad fraud, click fraud, and residential-proxy botnet enrollment.

Android mobile malware botnet ad-fraud supply-chain
4t
low advisory

Confused Deputy Vulnerability in MediaTek MiracastService (CVE-2026-20516)

An improperly exported MiracastService component on Android TV devices using MediaTek chipsets allows local attackers to manipulate Wi-Fi Direct states and cause denial of service via a confused deputy attack.

MiracastService android privilege-escalation media-tek android-tv
1t 1c
low advisory

MediaTek mt76 Wireless Driver Memory Access Vulnerability

CVE-2026-68310 in the MediaTek mt76 wireless driver for mt7915 chipsets allows for potential memory access issues due to inadequate validation during HE capability lookups.

mt7915 vulnerability networking informational
1c
medium advisory

NULL Pointer Dereference Vulnerability in MediaTek mt76 Wi-Fi Driver

A NULL pointer dereference vulnerability exists in the MediaTek mt76 driver within the mt76_connac_mcu_uni_bss_he_tlv function, potentially leading to kernel panic or denial-of-service conditions.

mt76 vulnerability denial-of-service kernel firmware informational product-news linux
1c