Out of Bounds Write in GenieZone by MediaTek Leads to Local Privilege Escalation

CVE-2026-20454

What is CVE-2026-20454?

The GenieZone product by MediaTek contains a vulnerability that may allow an attacker to exploit a race condition, resulting in an out of bounds write. If a malicious actor has already gained system privileges, this flaw can enable them to escalate their privileges locally without the need for any user interaction. It is crucial for users and administrators to apply the necessary patches provided by MediaTek to mitigate this risk.

References