CVE-2026-20497 Details
Description
In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10965550 / ALPS11393405; Issue ID: MSV-6941.
A high-severity out-of-bounds write vulnerability has been identified in the Geniezone component of certain MediaTek chipsets. This issue arises from a missing bounds check, which could allow a malicious actor with system privileges to escalate privileges further. The vulnerability does not require user interaction for exploitation.
MediaTek has issued patches for this vulnerability, which can be applied by device manufacturers. Specific patch IDs are ALPS10965550 and ALPS11393405.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Aug 4, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.mediatek.com/product-security-bulletin/August-2026 | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-787 | Out-of-bounds Write | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| mediatek mt6989 firmware | All versions |
CPE
Remediation
| |
| mediatek mt6989 | All versions |
CPE
Remediation
| |
| mediatek mt8755 firmware | All versions |
CPE
Remediation
| |
| mediatek mt8755 | All versions |
CPE
Remediation
| |
| mediatek mt8768 firmware | All versions |
CPE
Remediation
| |
| mediatek mt8768 | All versions |
CPE
Remediation
| |
| mediatek mt8771 firmware | All versions |
CPE
Remediation
| |
| mediatek mt8771 | All versions |
CPE
Remediation
| |
| mediatek mt8775 firmware | All versions |
CPE
Remediation
| |
| mediatek mt8775 | All versions |
CPE
Remediation
| |
| mediatek mt8781 firmware | All versions |
CPE
Remediation
| |
| mediatek mt8781 | All versions |
CPE
Remediation
| |
| mediatek mt8791t firmware | All versions |
CPE
Remediation
| |
| mediatek mt8791t | All versions |
CPE
Remediation
| |
| mediatek mt8792 firmware | All versions |
CPE
Remediation
| |
| mediatek mt8792 | All versions |
CPE
Remediation
| |
| mediatek mt8796 firmware | All versions |
CPE
Remediation
| |
| mediatek mt8796 | All versions |
CPE
Remediation
| |
| mediatek mt8797 firmware | All versions |
CPE
Remediation
| |
| mediatek mt8797 | All versions |
CPE
Remediation
| |
| mediatek mt8798 firmware | All versions |
CPE
Remediation
| |
| mediatek mt8798 | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 19, 2026 | Initial Analysis | [email protected] |
| Aug 5, 2026 | CVE Modified | CISA-ADP |
| Aug 3, 2026 | CVE Modified | CISA-ADP |
| Aug 3, 2026 | New CVE Received | [email protected] |