BaselineWatch
Desk

CVE-2026-20496

4.4 medium SSVC exploitation: none Analyzed

In geniezone, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11036877; Issue ID: MSV-7132.

Fix

Patch, vendor advisory and mitigation references on NVD 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 4.4 · mediatekNVD modified 2026-10-23 22:10

Affected (CPE criteria) 17

  • cpe:2.3:o:mediatek:mt6983_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:mediatek:mt8676_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:mediatek:mt8678_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:mediatek:mt8755_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:mediatek:mt8768_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:mediatek:mt8771_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:mediatek:mt8775_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:mediatek:mt8781_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:mediatek:mt8786_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:mediatek:mt8791t_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:mediatek:mt8792_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:mediatek:mt8793_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:mediatek:mt8796_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:mediatek:mt8797_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:mediatek:mt8798_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:mediatek:mt8799_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:mediatek:mt8910_firmware:-:*:*:*:*:*:*:*

References 1