CVE-2026-20447: Medium severity geniezone vulnerability
Published May 4, 2026
·Updated
In geniezone, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10724073; Issue ID: MSV-6296.
Affected Software
35 affected components
geniezone
All of the following
MediaTek Mt6768 Firmware
MediaTek Mt6768
All of the following
MediaTek Mt6789 Firmware
MediaTek Mt6789
All of the following
MediaTek Mt6877 Firmware
MediaTek Mt6877
All of the following
MediaTek Mt6899 Firmware
MediaTek Mt6899
All of the following
MediaTek Mt6989 Firmware
MediaTek Mt6989
All of the following
MediaTek Mt6991 Firmware
MediaTek Mt6991
All of the following
MediaTek Mt6993 Firmware
MediaTek Mt6993
All of the following
MediaTek Mt8196 Firmware
MediaTek Mt8196
All of the following
MediaTek Mt8367 Firmware
MediaTek Mt8367
All of the following
MediaTek Mt8766 Firmware
MediaTek Mt8766
All of the following
MediaTek Mt8768 Firmware
MediaTek Mt8768
All of the following
MediaTek Mt8781 Firmware
MediaTek Mt8781
All of the following
MediaTek Mt8786 Firmware
MediaTek Mt8786
All of the following
MediaTek Mt8788e Firmware
MediaTek Mt8788e
All of the following
MediaTek Mt8791t Firmware
MediaTek Mt8791t
All of the following
MediaTek Mt8793 Firmware
MediaTek Mt8793
All of the following
MediaTek Mt8910 Firmware
MediaTek Mt8910
Event History
May 4, 2026
CVE Published
via MITRE·05:41 AM
Data Sourced
via MITRE·05:41 AM
DescriptionWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-20447?
The severity of CVE-2026-20447 is critical due to the potential for local escalation of privilege.
2
How do I fix CVE-2026-20447?
CVE-2026-20447 can be fixed by applying the patch with ID ALPS10724073.
3
Who is affected by CVE-2026-20447?
Users of the geniezone software with System privileges are affected by CVE-2026-20447.
4
Is user interaction required to exploit CVE-2026-20447?
No, user interaction is not needed to exploit CVE-2026-20447 once System privileges are obtained.
5
What can happen if CVE-2026-20447 is exploited?
Exploitation of CVE-2026-20447 can lead to a local escalation of privilege for a malicious actor.