# CVE-2026-20448: In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local… Source: https://junglewise.ai/threats/cve-2026-20448-in-geniezone-there-is-a-possible-escalation-of-privilege-due-to-a Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Published: 2026-05-04 License: CC BY 4.0 with a link back CVE-2026-20448 · Severity: medium · CVSS 6.7 · Published 2026-05-04 In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10708513; Issue ID: MSV-6281. Technologies: [MediaTek Mt6765](https://junglewise.ai/threats/technologies/mt6765), [MediaTek Mt6765 Firmware](https://junglewise.ai/threats/technologies/mt6765-firmware), [MediaTek Mt6768](https://junglewise.ai/threats/technologies/mt6768), [MediaTek Mt6768 Firmware](https://junglewise.ai/threats/technologies/mt6768-firmware), [MediaTek Mt6789](https://junglewise.ai/threats/technologies/mt6789), [MediaTek Mt6789 Firmware](https://junglewise.ai/threats/technologies/mt6789-firmware), [MediaTek Mt6877](https://junglewise.ai/threats/technologies/mt6877), [MediaTek Mt6877 Firmware](https://junglewise.ai/threats/technologies/mt6877-firmware), [MediaTek Mt6897](https://junglewise.ai/threats/technologies/mt6897), [MediaTek Mt6897 Firmware](https://junglewise.ai/threats/technologies/mt6897-firmware), [MediaTek Mt6899](https://junglewise.ai/threats/technologies/mt6899), [MediaTek Mt6899 Firmware](https://junglewise.ai/threats/technologies/mt6899-firmware), [MediaTek Mt6989](https://junglewise.ai/threats/technologies/mt6989), [MediaTek Mt6989 Firmware](https://junglewise.ai/threats/technologies/mt6989-firmware), [MediaTek Mt6991](https://junglewise.ai/threats/technologies/mt6991), [MediaTek Mt6991 Firmware](https://junglewise.ai/threats/technologies/mt6991-firmware), [MediaTek MT6993](https://junglewise.ai/threats/technologies/mt6993), [MediaTek Mt6993 Firmware](https://junglewise.ai/threats/technologies/mt6993-firmware), [MediaTek Mt8367](https://junglewise.ai/threats/technologies/mt8367), [MediaTek Mt8367 Firmware](https://junglewise.ai/threats/technologies/mt8367-firmware), [MediaTek Mt8766](https://junglewise.ai/threats/technologies/mt8766), [MediaTek Mt8766 Firmware](https://junglewise.ai/threats/technologies/mt8766-firmware), [MediaTek Mt8768](https://junglewise.ai/threats/technologies/mt8768), [MediaTek Mt8768 Firmware](https://junglewise.ai/threats/technologies/mt8768-firmware), [MediaTek MT8775](https://junglewise.ai/threats/technologies/mt8775), [MediaTek Mt8775 Firmware](https://junglewise.ai/threats/technologies/mt8775-firmware), [MediaTek Mt8781](https://junglewise.ai/threats/technologies/mt8781), [MediaTek Mt8781 Firmware](https://junglewise.ai/threats/technologies/mt8781-firmware), [MediaTek Mt8786](https://junglewise.ai/threats/technologies/mt8786), [MediaTek Mt8786 Firmware](https://junglewise.ai/threats/technologies/mt8786-firmware), [MediaTek Mt8788e](https://junglewise.ai/threats/technologies/mt8788e), [MediaTek Mt8788e Firmware](https://junglewise.ai/threats/technologies/mt8788e-firmware), [MediaTek Mt8791t](https://junglewise.ai/threats/technologies/mt8791t), [MediaTek Mt8791t Firmware](https://junglewise.ai/threats/technologies/mt8791t-firmware), [MediaTek MT8792](https://junglewise.ai/threats/technologies/mt8792), [MediaTek Mt8792 Firmware](https://junglewise.ai/threats/technologies/mt8792-firmware), [MediaTek Mt8793](https://junglewise.ai/threats/technologies/mt8793), [MediaTek Mt8793 Firmware](https://junglewise.ai/threats/technologies/mt8793-firmware), [MediaTek MT8796](https://junglewise.ai/threats/technologies/mt8796), [MediaTek Mt8796 Firmware](https://junglewise.ai/threats/technologies/mt8796-firmware), [MediaTek MT8893](https://junglewise.ai/threats/technologies/mt8893), [MediaTek Mt8893 Firmware](https://junglewise.ai/threats/technologies/mt8893-firmware), [MediaTek Mt8910](https://junglewise.ai/threats/technologies/mt8910), [MediaTek Mt8910 Firmware](https://junglewise.ai/threats/technologies/mt8910-firmware). Vendors: [MediaTek](https://junglewise.ai/threats/vendors/mediatek). ## Quick answers **Is CVE-2026-20448 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-20448 being exploited in the wild. **How severe is CVE-2026-20448?** Medium severity, with a CVSS score of 6.7, published 4 May 2026. **Which products and versions are affected?** MediaTek Mt6765, MediaTek Mt6765 Firmware, MediaTek Mt6768, MediaTek Mt6768 Firmware and 40 more. The advisory does not name versions. **Is there a fix for CVE-2026-20448?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it. **Am I affected by CVE-2026-20448?** Check whether you run MediaTek Mt6765, MediaTek Mt6765 Firmware, MediaTek Mt6768 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you. ## Affected products - MediaTek Mt6765 - MediaTek Mt6765 Firmware - MediaTek Mt6768 - MediaTek Mt6768 Firmware - MediaTek Mt6789 - MediaTek Mt6789 Firmware - MediaTek Mt6877 - MediaTek Mt6877 Firmware - MediaTek Mt6897 - MediaTek Mt6897 Firmware - MediaTek Mt6899 - MediaTek Mt6899 Firmware - MediaTek Mt6989 - MediaTek Mt6989 Firmware - MediaTek Mt6991 - MediaTek Mt6991 Firmware - MediaTek MT6993 - MediaTek Mt6993 Firmware - MediaTek Mt8367 - MediaTek Mt8367 Firmware - MediaTek Mt8766 - MediaTek Mt8766 Firmware - MediaTek Mt8768 - MediaTek Mt8768 Firmware - MediaTek MT8775 - MediaTek Mt8775 Firmware - MediaTek Mt8781 - MediaTek Mt8781 Firmware - MediaTek Mt8786 - MediaTek Mt8786 Firmware - MediaTek Mt8788e - MediaTek Mt8788e Firmware - MediaTek Mt8791t - MediaTek Mt8791t Firmware - MediaTek MT8792 - MediaTek Mt8792 Firmware - MediaTek Mt8793 - MediaTek Mt8793 Firmware - MediaTek MT8796 - MediaTek Mt8796 Firmware - MediaTek MT8893 - MediaTek Mt8893 Firmware - MediaTek Mt8910 - MediaTek Mt8910 Firmware ## Related threats - [MediaTek vdec out-of-bounds write in type confusion](https://junglewise.ai/threats/cve-2026-20579-in-vdec-there-is-a-possible-out-of-bounds-write-due-to-type) - [MediaTek out of bounds write in modem](https://junglewise.ai/threats/cve-2026-20544-in-meta-there-is-a-possible-out-of-bounds-write-due-to-a-missing) - [MediaTek Modem information disclosure due to logic error](https://junglewise.ai/threats/cve-2026-20543-in-modem-there-is-a-possible-information-disclosure-due-to-a) - [MediaTek Modem out-of-bounds read due to missing permission check](https://junglewise.ai/threats/cve-2026-20538-in-modem-there-is-a-possible-out-of-bounds-read-due-to-a-missing) - [MediaTek Modem out of bounds read](https://junglewise.ai/threats/cve-2026-20534-in-modem-there-is-a-possible-out-of-bounds-read-due-to-an)