CVE-2026-20454 — MEDIUM (6.4)

Vulnerability Description

In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10873936; Issue ID: MSV-6786.

CVSS Score

6.4

MEDIUM

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Mediatek	Mt8673 Firmware	-
Mediatek	Mt8673	-
Mediatek	Mt8765 Firmware	-
Mediatek	Mt8765	-
Mediatek	Mt8766 Firmware	-
Mediatek	Mt8766	-
Mediatek	Mt8768 Firmware	-
Mediatek	Mt8768	-
Mediatek	Mt8781 Firmware	-
Mediatek	Mt8781	-
Mediatek	Mt8786 Firmware	-
Mediatek	Mt8786	-
Mediatek	Mt8788 Firmware	-
Mediatek	Mt8788	-
Mediatek	Mt8791T Firmware	-
Mediatek	Mt8791T	-
Mediatek	Mt8793 Firmware	-
Mediatek	Mt8793	-
Mediatek	Mt8797 Firmware	-
Mediatek	Mt8797	-

Related Weaknesses (CWE)

CWE-367

References

https://corp.mediatek.com/product-security-bulletin/June-2026Vendor Advisory

FAQ

What is CVE-2026-20454?

CVE-2026-20454 is a vulnerability with a CVSS score of 6.4 (MEDIUM). In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User int...

How severe is CVE-2026-20454?

CVE-2026-20454 has been rated MEDIUM with a CVSS base score of 6.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-20454?

Check the references section above for vendor advisories and patch information. Affected products include: Mediatek Mt8673 Firmware, Mediatek Mt8673, Mediatek Mt8765 Firmware, Mediatek Mt8765, Mediatek Mt8766 Firmware.