CVE-2026-20448_CVE-2026-20448

6.7 / 10

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10708513; Issue ID: MSV-6281.

Basic Information

ID CVE-2026-20448

Source MediaTek

Published May 4, 2026 at 05:41

Modified May 4, 2026 at 12:57

Affected Product

Vendor MediaTek, Inc.

Product MediaTek chipset

Version MT6765

Affected Versions MediaTek, Inc. MediaTek chipset MT6765
MediaTek, Inc. MediaTek chipset MT6768
MediaTek, Inc. MediaTek chipset MT6789
MediaTek, Inc. MediaTek chipset MT6877
MediaTek, Inc. MediaTek chipset MT6897
MediaTek, Inc. MediaTek chipset MT6899
MediaTek, Inc. MediaTek chipset MT6989
MediaTek, Inc. MediaTek chipset MT6991
MediaTek, Inc. MediaTek chipset MT6993
MediaTek, Inc. MediaTek chipset MT8367
MediaTek, Inc. MediaTek chipset MT8766
MediaTek, Inc. MediaTek chipset MT8768
MediaTek, Inc. MediaTek chipset MT8775
MediaTek, Inc. MediaTek chipset MT8781
MediaTek, Inc. MediaTek chipset MT8786
MediaTek, Inc. MediaTek chipset MT8788E
MediaTek, Inc. MediaTek chipset MT8791T
MediaTek, Inc. MediaTek chipset MT8792
MediaTek, Inc. MediaTek chipset MT8793
MediaTek, Inc. MediaTek chipset MT8796
MediaTek, Inc. MediaTek chipset MT8893
MediaTek, Inc. MediaTek chipset MT8910

CWE Classification

CWE-280

References

corp.mediatek.com /product-security-bulletin/May-2026

{
    "lastseen": "",
    "description": "In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10708513; Issue ID: MSV-6281.",
    "published": "2026-05-04T05:41:52.927Z",
    "modified": "2026-05-04T12:57:21.672Z",
    "type": "cve",
    "title": "CVE-2026-20448",
    "source": "MediaTek",
    "references": "https://corp.mediatek.com/product-security-bulletin/May-2026",
    "id": "CVE-2026-20448",
    "bulletinFamily": "",
    "cwe": [
        "CWE-280"
    ],
    "cvelist": null,
    "sourceData": "MediaTek, Inc. MediaTek chipset MT6765\nMediaTek, Inc. MediaTek chipset MT6768\nMediaTek, Inc. MediaTek chipset MT6789\nMediaTek, Inc. MediaTek chipset MT6877\nMediaTek, Inc. MediaTek chipset MT6897\nMediaTek, Inc. MediaTek chipset MT6899\nMediaTek, Inc. MediaTek chipset MT6989\nMediaTek, Inc. MediaTek chipset MT6991\nMediaTek, Inc. MediaTek chipset MT6993\nMediaTek, Inc. MediaTek chipset MT8367\nMediaTek, Inc. MediaTek chipset MT8766\nMediaTek, Inc. MediaTek chipset MT8768\nMediaTek, Inc. MediaTek chipset MT8775\nMediaTek, Inc. MediaTek chipset MT8781\nMediaTek, Inc. MediaTek chipset MT8786\nMediaTek, Inc. MediaTek chipset MT8788E\nMediaTek, Inc. MediaTek chipset MT8791T\nMediaTek, Inc. MediaTek chipset MT8792\nMediaTek, Inc. MediaTek chipset MT8793\nMediaTek, Inc. MediaTek chipset MT8796\nMediaTek, Inc. MediaTek chipset MT8893\nMediaTek, Inc. MediaTek chipset MT8910",
    "sourceHref": "",
    "cvss": {
        "score": 6.7,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "MediaTek chipset",
    "version": "MT6765",
    "vendor": "MediaTek, Inc.",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}