Memory Corruption in Geniezone Product by MediaTek
CVE-2025-20802
6.7MEDIUM
Key Information:
- Vendor
MediaTek
- Vendor
- CVE Published:
- 6 January 2026
What is CVE-2025-20802?
A memory corruption vulnerability has been identified in Geniezone, which can potentially lead to local privilege escalation. This situation arises from a use-after-free condition. If a malicious actor is able to gain system privileges, they may exploit this vulnerability without requiring user interaction, allowing unauthorized actions. A patch has been issued under ID ALPS10238968 to address this issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
MT6991, MT8196, MT8367, MT8781, MT8786, MT8793 Android 15.0
References
CVSS V3.1
Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
