CVE-2026-20447: Medium severity geniezone vulnerability
In geniezone, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10724073; Issue ID: MSV-6296.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2026-06-05 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ALPS10724073
Event History
Frequently Asked Questions
What is the severity of CVE-2026-20447?
The severity of CVE-2026-20447 is critical due to the potential for local escalation of privilege.
How do I fix CVE-2026-20447?
CVE-2026-20447 can be fixed by applying the patch with ID ALPS10724073.
Who is affected by CVE-2026-20447?
Users of the geniezone software with System privileges are affected by CVE-2026-20447.
Is user interaction required to exploit CVE-2026-20447?
No, user interaction is not needed to exploit CVE-2026-20447 once System privileges are obtained.
What can happen if CVE-2026-20447 is exploited?
Exploitation of CVE-2026-20447 can lead to a local escalation of privilege for a malicious actor.