← Database

CVE-2026-20448

MEDIUM CVSS: 6.7 Published: 2026-05-04 Modified: 2026-06-17

Description

In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10708513; Issue ID: MSV-6281.

Affected Platforms

Mediatek Mt8792 FirmwareMediatek Mt8792Mediatek Mt6989Mediatek Mt6991Mediatek Mt6897Mediatek Mt6993Mediatek Mt8768Mediatek Mt8788E FirmwareMediatek Mt8786Mediatek Mt6789

Weakness Type

CWE-280

References