CVE-2026-20496
Full vulnerability record from the local CVENow database.
Description
In geniezone, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11036877; Issue ID: MSV-7132.
Severity
MEDIUM
CVSS score
4.4
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2026-08-03 03:16:44.777000
Last modified
2026-10-23 22:10:00.160000
View original CVE JSON
{
"id": "CVE-2026-20496",
"sourceIdentifier": "[email protected]",
"published": "2026-08-03T03:16:44.777",
"lastModified": "2026-10-23T22:10:00.160",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In geniezone, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11036877; Issue ID: MSV-7132."
},
{
"lang": "es",
"value": "En geniezone, existe una posible lectura fuera de límites debido a una comprobación de límites faltante. Esto podría llevar a una revelación de información local si un actor malicioso ya ha obtenido el privilegio de Sistema. No se necesita interacción del usuario para la explotación. ID del parche: ALPS11036877; ID del problema: MSV-7132."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "MediaTek, Inc.",
"product": "MediaTek chipset",
"defaultStatus": "unaffected",
"versions": [
{
"version": "MT6983",
"status": "affected"
},
{
"version": "MT8676",
"status": "affected"
},
{
"version": "MT8678",
"status": "affected"
},
{
"version": "MT8755",
"status": "affected"
},
{
"version": "MT8768",
"status": "affected"
},
{
"version": "MT8771",
"status": "affected"
},
{
"version": "MT8775",
"status": "affected"
},
{
"version": "MT8781",
"status": "affected"
},
{
"version": "MT8786",
"status": "affected"
},
{
"version": "MT8791T",
"status": "affected"
},
{
"version": "MT8792",
"status": "affected"
},
{
"version": "MT8793",
"status": "affected"
},
{
"version": "MT8796",
"status": "affected"
},
{
"version": "MT8797",
"status": "affected"
},
{
"version": "MT8798",
"status": "affected"
},
{
"version": "MT8799",
"status": "affected"
},
{
"version": "MT8910",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 0.8,
"impactScore": 3.6
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-08-03T18:55:31.744287Z",
"id": "CVE-2026-20496",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-125"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:mediatek:mt6983_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "967E956F-07B4-4957-9C84-DDB5C38E5E69"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
"matchCriteriaId": "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:mediatek:mt8676_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "645D7C99-A0A0-4FB0-97AC-3DA5161A44D9"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*",
"matchCriteriaId": "EE302F6F-170E-4350-A8F4-65BE0C50CB78"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:mediatek:mt8678_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CFEC7A7B-6948-4B8A-BFA1-9F9D07043605"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
"matchCriteriaId": "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:mediatek:mt8755_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6B49A54E-B0C5-45C4-8396-5E6A2613E3B1"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:mediatek:mt8755:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1CF88096-5CBD-4A4B-8F47-33D38985956F"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:mediatek:mt8768_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "303069C6-F031-4176-9465-46F4134BB423"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:mediatek:mt8771_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9F17C468-79B8-4FD6-8AB2-80E8781EAEEC"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0D09F23D-D023-4A60-B426-61251FDD8A5A"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:mediatek:mt8775_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FAA319BC-2689-497C-8D7D-482CD2AD89A1"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:mediatek:mt8775:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DE5FB550-7264-4879-BAF9-6798949113AF"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:mediatek:mt8781_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7E2280E5-F903-4541-8404-9F789CEFF172"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
"matchCriteriaId": "533284E5-C3AF-48D3-A287-993099DB2E41"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:mediatek:mt8786_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "88A514F4-3EAF-45FB-8736-4A015E4DEB4E"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:mediatek:mt8791t_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6D15A887-AC6B-4458-8355-8505742F4FC2"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:mediatek:mt8792_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AE904A76-14A2-41D5-86FF-BCA686342E85"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*",
"matchCriteriaId": "336FC69E-E89F-4642-B6B9-8009D9A2BD52"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:mediatek:mt8793_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "42C2F52D-C49C-4AFF-B6FA-FFA82EF96142"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:mediatek:mt8796_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6DC17C8D-377F-4343-BE7E-359224912061"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:mediatek:mt8796:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DE933AD9-3A6F-421B-8AB3-C45F8DEA9548"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:mediatek:mt8797_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "20E2FBC8-3C13-4663-8BFF-AA6B66F3F260"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2B469BF4-5961-42E9-814B-1BE06D182E45"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:mediatek:mt8798_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C91FB79A-E095-40BB-8141-240D69CAB131"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
"matchCriteriaId": "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:mediatek:mt8799_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BB8ADEB7-A1A3-4781-BB65-4D2AF9896F80"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:mediatek:mt8799:-:*:*:*:*:*:*:*",
"matchCriteriaId": "ACB27F98-6318-44C8-A28D-375A357A03CA"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:mediatek:mt8910_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A05E635E-9559-4899-A7BA-A74EB6501D1C"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:mediatek:mt8910:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8C81BC81-1358-4005-8D35-92428D052A65"
}
]
}
]
}
],
"references": [
{
"url": "https://www.mediatek.com/product-security-bulletin/August-2026",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}