# CVE-2026-20496: In geniezone, there is a possible out of bounds read due to a missing bounds check. This could lead to local…

Source: https://junglewise.ai/threats/cve-2026-20496-in-geniezone-there-is-a-possible-out-of-bounds-read-due-to-a  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-03  
License: CC BY 4.0 with a link back

CVE-2026-20496 · Severity: medium · CVSS 4.4 · Published 2026-08-03

In geniezone, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11036877; Issue ID: MSV-7132.

Technologies: [MediaTek Mt6983](https://junglewise.ai/threats/technologies/mt6983), [MediaTek Mt6983 Firmware](https://junglewise.ai/threats/technologies/mt6983-firmware), [MediaTek MT8676](https://junglewise.ai/threats/technologies/mt8676), [MediaTek Mt8676 Firmware](https://junglewise.ai/threats/technologies/mt8676-firmware), [MediaTek MT8678](https://junglewise.ai/threats/technologies/mt8678), [MediaTek Mt8678 Firmware](https://junglewise.ai/threats/technologies/mt8678-firmware), [MediaTek MT8755](https://junglewise.ai/threats/technologies/mt8755), [MediaTek Mt8755 Firmware](https://junglewise.ai/threats/technologies/mt8755-firmware), [MediaTek Mt8768](https://junglewise.ai/threats/technologies/mt8768), [MediaTek Mt8768 Firmware](https://junglewise.ai/threats/technologies/mt8768-firmware), [MediaTek Mt8771](https://junglewise.ai/threats/technologies/mt8771), [MediaTek Mt8771 Firmware](https://junglewise.ai/threats/technologies/mt8771-firmware), [MediaTek MT8775](https://junglewise.ai/threats/technologies/mt8775), [MediaTek Mt8775 Firmware](https://junglewise.ai/threats/technologies/mt8775-firmware), [MediaTek Mt8781](https://junglewise.ai/threats/technologies/mt8781), [MediaTek Mt8781 Firmware](https://junglewise.ai/threats/technologies/mt8781-firmware), [MediaTek Mt8786](https://junglewise.ai/threats/technologies/mt8786), [MediaTek Mt8786 Firmware](https://junglewise.ai/threats/technologies/mt8786-firmware), [MediaTek Mt8791t](https://junglewise.ai/threats/technologies/mt8791t), [MediaTek Mt8791t Firmware](https://junglewise.ai/threats/technologies/mt8791t-firmware), [MediaTek MT8792](https://junglewise.ai/threats/technologies/mt8792), [MediaTek Mt8792 Firmware](https://junglewise.ai/threats/technologies/mt8792-firmware), [MediaTek Mt8793](https://junglewise.ai/threats/technologies/mt8793), [MediaTek Mt8793 Firmware](https://junglewise.ai/threats/technologies/mt8793-firmware), [MediaTek MT8796](https://junglewise.ai/threats/technologies/mt8796), [MediaTek Mt8796 Firmware](https://junglewise.ai/threats/technologies/mt8796-firmware), [MediaTek Mt8797](https://junglewise.ai/threats/technologies/mt8797), [MediaTek Mt8797 Firmware](https://junglewise.ai/threats/technologies/mt8797-firmware), [MediaTek Mt8798](https://junglewise.ai/threats/technologies/mt8798), [MediaTek Mt8798 Firmware](https://junglewise.ai/threats/technologies/mt8798-firmware), [MediaTek Mt8799](https://junglewise.ai/threats/technologies/mt8799), [MediaTek Mt8799 Firmware](https://junglewise.ai/threats/technologies/mt8799-firmware), [MediaTek Mt8910](https://junglewise.ai/threats/technologies/mt8910), [MediaTek Mt8910 Firmware](https://junglewise.ai/threats/technologies/mt8910-firmware). Vendors: [MediaTek](https://junglewise.ai/threats/vendors/mediatek).

## Quick answers

**Is CVE-2026-20496 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-20496 being exploited in the wild.

**How severe is CVE-2026-20496?** Medium severity, with a CVSS score of 4.4, published 3 August 2026.

**Which products and versions are affected?** MediaTek Mt6983, MediaTek Mt6983 Firmware, MediaTek MT8676, MediaTek Mt8676 Firmware and 30 more. The advisory does not name versions.

**Is there a fix for CVE-2026-20496?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2026-20496?** Check whether you run MediaTek Mt6983, MediaTek Mt6983 Firmware, MediaTek MT8676 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- MediaTek Mt6983
- MediaTek Mt6983 Firmware
- MediaTek MT8676
- MediaTek Mt8676 Firmware
- MediaTek MT8678
- MediaTek Mt8678 Firmware
- MediaTek MT8755
- MediaTek Mt8755 Firmware
- MediaTek Mt8768
- MediaTek Mt8768 Firmware
- MediaTek Mt8771
- MediaTek Mt8771 Firmware
- MediaTek MT8775
- MediaTek Mt8775 Firmware
- MediaTek Mt8781
- MediaTek Mt8781 Firmware
- MediaTek Mt8786
- MediaTek Mt8786 Firmware
- MediaTek Mt8791t
- MediaTek Mt8791t Firmware
- MediaTek MT8792
- MediaTek Mt8792 Firmware
- MediaTek Mt8793
- MediaTek Mt8793 Firmware
- MediaTek MT8796
- MediaTek Mt8796 Firmware
- MediaTek Mt8797
- MediaTek Mt8797 Firmware
- MediaTek Mt8798
- MediaTek Mt8798 Firmware
- MediaTek Mt8799
- MediaTek Mt8799 Firmware
- MediaTek Mt8910
- MediaTek Mt8910 Firmware

## Related threats

- [MediaTek GPU use after free leading to system crash](https://junglewise.ai/threats/cve-2026-20515-mediatek-gpu-use-after-free-leading-to-system-crash)
- [MediaTek Modem denial of service due to missing bounds check](https://junglewise.ai/threats/cve-2026-20504-mediatek-modem-denial-of-service-due-to-missing-bounds-check)
- [MediaTek Modem system crash due to missing bounds check](https://junglewise.ai/threats/cve-2026-20503-mediatek-modem-system-crash-due-to-missing-bounds-check)
- [MediaTek vdec out of bounds write](https://junglewise.ai/threats/cve-2026-20502-mediatek-vdec-out-of-bounds-write)
- [MediaTek vdec heap buffer overflow privilege escalation](https://junglewise.ai/threats/cve-2026-20501-mediatek-vdec-heap-buffer-overflow-privilege-escalation)