Back to CVE records
Medium 6.7Published Jun 1, 2026

CVE-2026-20453In geniezone, there is a possible out of bounds write due to a missing bounds check.

Updated under an hour ago ()

Does this affect you?

It affects mediatek mt8673_firmware and 35 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10886526; Issue ID: MSV-6791.

CVSS
6.7 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE)
CWE-787
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Not given
NVD analysis
Analyzed
Record last updated
Jul 22, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
mediatek mt8673_firmware
mediatek:mt8673_firmware
all versions
NVD
mediatek mt8765_firmware
mediatek:mt8765_firmware
all versions
NVD
mediatek mt8766_firmware
mediatek:mt8766_firmware
all versions
NVD
mediatek mt8768_firmware
mediatek:mt8768_firmware
all versions
NVD
mediatek mt8781_firmware
mediatek:mt8781_firmware
all versions
NVD
mediatek mt8786_firmware
mediatek:mt8786_firmware
all versions
NVD
mediatek mt8788_firmware
mediatek:mt8788_firmware
all versions
NVD
mediatek mt8791t_firmware
mediatek:mt8791t_firmware
all versions
NVD
mediatek mt8793_firmware
mediatek:mt8793_firmware
all versions
NVD
mediatek mt8797_firmware
mediatek:mt8797_firmware
all versions
NVD
mediatek mt8798_firmware
mediatek:mt8798_firmware
all versions
NVD
mediatek mt8910_firmware
mediatek:mt8910_firmware
all versions
NVD
mediatek mt6991_firmware
mediatek:mt6991_firmware
all versions
NVD
mediatek mt6989_firmware
mediatek:mt6989_firmware
all versions
NVD
mediatek mt6985_firmware
mediatek:mt6985_firmware
all versions
NVD
mediatek mt6983_firmware
mediatek:mt6983_firmware
all versions
NVD
mediatek mt6899_firmware
mediatek:mt6899_firmware
all versions
NVD
mediatek mt6897_firmware
mediatek:mt6897_firmware
all versions
NVD
mediatek mt6895_firmware
mediatek:mt6895_firmware
all versions
NVD
mediatek mt6893_firmware
mediatek:mt6893_firmware
all versions
NVD
mediatek mt6889_firmware
mediatek:mt6889_firmware
all versions
NVD
mediatek mt6886_firmware
mediatek:mt6886_firmware
all versions
NVD
mediatek mt6885_firmware
mediatek:mt6885_firmware
all versions
NVD
mediatek mt6883_firmware
mediatek:mt6883_firmware
all versions
NVD
mediatek mt6879_firmware
mediatek:mt6879_firmware
all versions
NVD
mediatek mt6878_firmware
mediatek:mt6878_firmware
all versions
NVD
mediatek mt6877_firmware
mediatek:mt6877_firmware
all versions
NVD
mediatek mt6855_firmware
mediatek:mt6855_firmware
all versions
NVD
mediatek mt6853_firmware
mediatek:mt6853_firmware
all versions
NVD
mediatek mt6835_firmware
mediatek:mt6835_firmware
all versions
NVD
mediatek mt6789_firmware
mediatek:mt6789_firmware
all versions
NVD
mediatek mt6781_firmware
mediatek:mt6781_firmware
all versions
NVD
mediatek mt6768_firmware
mediatek:mt6768_firmware
all versions
NVD
mediatek mt6765_firmware
mediatek:mt6765_firmware
all versions
NVD
mediatek mt6761_firmware
mediatek:mt6761_firmware
all versions
NVD
mediatek mt6739_firmware
mediatek:mt6739_firmware
all versions
NVD

References

  • vendor-advisory

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.