CVE-2026-20498

Summary

In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10900493; Issue ID: MSV-6765.

Affected Software

VendorProductVersion RangeStatus
MediaTek, Inc.MediaTek chipsetMT6991affected
MediaTek, Inc.MediaTek chipsetMT8768affected
MediaTek, Inc.MediaTek chipsetMT8791Taffected
MediaTek, Inc.MediaTek chipsetMT8792affected
MediaTek, Inc.MediaTek chipsetMT8796affected
MediaTek, Inc.MediaTek chipsetMT8799affected
MediaTek, Inc.MediaTek chipsetMT8873affected
MediaTek, Inc.MediaTek chipsetMT8883affected
MediaTek, Inc.MediaTek chipsetMT8893affected
MediaTek, Inc.MediaTek chipsetMT8910affected

Weaknesses

  • CWE-1287: CWE-1287 Improper Validation of Specified Type of Input

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References