Information Disclosure Vulnerability in Geniezone by MediaTek

CVE-2026-20518

What is CVE-2026-20518?

An information disclosure vulnerability has been identified in Geniezone due to an absent bounds check. This flaw allows a malicious actor with System privileges to potentially disclose sensitive information. Successful exploitation of this vulnerability requires user interaction, making it crucial for users to exercise caution. MediaTek has issued patches identified as ALPS10867524 and ALPS10876355 to address this issue. For further details, refer to the provided MediaTek product security bulletin.

References