6.0Medium
CVE-2026-20481
Description
In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10965373; Issue ID: MSV-6935.
Weakness (CWE):
CWE-787
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| MediaTek, Inc. | MediaTek chipset | MT6989, MT8755, MT8768, MT8771, MT8775, MT8781, MT8791T, MT8792, MT8793, MT8796, MT8797, MT8798, MT8799, MT8910 | |
| mediatek | mt6989 firmware | — | |
| mediatek | mt8755 firmware | — | |
| mediatek | mt8768 firmware | — | |
| mediatek | mt8771 firmware | — | |
| mediatek | mt8775 firmware | — | |
| mediatek | mt8781 firmware | — | |
| mediatek | mt8791t firmware | — | |
| mediatek | mt8792 firmware | — | |
| mediatek | mt8793 firmware | — | |
| mediatek | mt8796 firmware | — | |
| mediatek | mt8797 firmware | — | |
| mediatek | mt8798 firmware | — | |
| mediatek | mt8799 firmware | — | |
| mediatek | mt8910 firmware | — |
References and patches
- https://www.mediatek.com/product-security-bulletin/August-2026 Vendor Advisory
CPE matches (NVD) (14)
cpe:2.3:o:mediatek:mt6989_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8755_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8768_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8771_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8775_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8781_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8791t_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8792_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8793_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8796_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8797_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8798_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8799_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8910_firmware:-:*:*:*:*:*:*:*