CVE-2026-20448: Medium severity geniezone vulnerability
In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10708513; Issue ID: MSV-6281.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2026-06-05 - Upgrade
Upgrade
geniezoneto a version that resolves this vulnerability.Patch ALPS10708513
Event History
Frequently Asked Questions
What is the severity of CVE-2026-20448?
CVE-2026-20448 has a moderate severity level due to the potential for privilege escalation.
How do I fix CVE-2026-20448?
To fix CVE-2026-20448, apply the patch identified by ALPS10708513 to the affected geniezone software.
What is the impact of CVE-2026-20448?
The impact of CVE-2026-20448 is that it allows a malicious actor with System privileges to escalate privileges locally, potentially compromising system integrity.
Is user interaction required to exploit CVE-2026-20448?
No, user interaction is not needed to exploit CVE-2026-20448.
What caused the vulnerability in CVE-2026-20448?
CVE-2026-20448 was caused by a missing permission check within the geniezone software.