Privilege Escalation Vulnerability in Geniezone by MediaTek
CVE-2026-20447

6.7MEDIUM

Key Information:

Vendor

MediaTek

Vendor
CVE Published:
4 May 2026

What is CVE-2026-20447?

A vulnerability in Geniezone allows for potential local escalation of privilege due to a missing bounds check. If an attacker has already compromised the system with elevated privileges, they could exploit this vulnerability to gain additional access. Notably, user interaction is not required for exploitation, significantly increasing the risk. Affected versions must be patched with ID ALPS10724073 to mitigate this issue effectively.

Affected Version(s)

MediaTek chipset MT6768

MediaTek chipset MT6789

MediaTek chipset MT6877

References

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.