CVE-2026-20447 | THREATINT

Description

In geniezone, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10724073; Issue ID: MSV-6296.

PUBLISHED Reserved 2025-11-03 | Published 2026-05-04 | Updated 2026-05-05 | Assigner MediaTek

Problem types

CWE-125 Out-of-bounds Read

Product status

Default status

unaffected

MT6768

affected

MT6789

affected

MT6877

affected

MT6899

affected

MT6989

affected

MT6991

affected

MT6993

affected

MT8196

affected

MT8367

affected

MT8766

affected

MT8768

affected

MT8781

affected

MT8786

affected

MT8788E

affected

MT8791T

affected

MT8793

affected

MT8910

affected

References

corp.mediatek.com/product-security-bulletin/May-2026

cve.org (CVE-2026-20447)

nvd.nist.gov (CVE-2026-20447)

Download JSON