# CVE-2026-20497: In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local…

Source: https://junglewise.ai/threats/cve-2026-20497-in-geniezone-there-is-a-possible-out-of-bounds-write-due-to-a  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-03  
License: CC BY 4.0 with a link back

CVE-2026-20497 · Severity: medium · CVSS 6 · Published 2026-08-03

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10965550 / ALPS11393405; Issue ID: MSV-6941.

Technologies: [MediaTek Mt6989](https://junglewise.ai/threats/technologies/mt6989), [MediaTek Mt6989 Firmware](https://junglewise.ai/threats/technologies/mt6989-firmware), [MediaTek MT8755](https://junglewise.ai/threats/technologies/mt8755), [MediaTek Mt8755 Firmware](https://junglewise.ai/threats/technologies/mt8755-firmware), [MediaTek Mt8768](https://junglewise.ai/threats/technologies/mt8768), [MediaTek Mt8768 Firmware](https://junglewise.ai/threats/technologies/mt8768-firmware), [MediaTek Mt8771](https://junglewise.ai/threats/technologies/mt8771), [MediaTek Mt8771 Firmware](https://junglewise.ai/threats/technologies/mt8771-firmware), [MediaTek MT8775](https://junglewise.ai/threats/technologies/mt8775), [MediaTek Mt8775 Firmware](https://junglewise.ai/threats/technologies/mt8775-firmware), [MediaTek Mt8781](https://junglewise.ai/threats/technologies/mt8781), [MediaTek Mt8781 Firmware](https://junglewise.ai/threats/technologies/mt8781-firmware), [MediaTek Mt8791t](https://junglewise.ai/threats/technologies/mt8791t), [MediaTek Mt8791t Firmware](https://junglewise.ai/threats/technologies/mt8791t-firmware), [MediaTek MT8792](https://junglewise.ai/threats/technologies/mt8792), [MediaTek Mt8792 Firmware](https://junglewise.ai/threats/technologies/mt8792-firmware), [MediaTek MT8796](https://junglewise.ai/threats/technologies/mt8796), [MediaTek Mt8796 Firmware](https://junglewise.ai/threats/technologies/mt8796-firmware), [MediaTek Mt8797](https://junglewise.ai/threats/technologies/mt8797), [MediaTek Mt8797 Firmware](https://junglewise.ai/threats/technologies/mt8797-firmware), [MediaTek Mt8798](https://junglewise.ai/threats/technologies/mt8798), [MediaTek Mt8798 Firmware](https://junglewise.ai/threats/technologies/mt8798-firmware). Vendors: [MediaTek](https://junglewise.ai/threats/vendors/mediatek).

## Quick answers

**Is CVE-2026-20497 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-20497 being exploited in the wild.

**How severe is CVE-2026-20497?** Medium severity, with a CVSS score of 6, published 3 August 2026.

**Which products and versions are affected?** MediaTek Mt6989, MediaTek Mt6989 Firmware, MediaTek MT8755, MediaTek Mt8755 Firmware and 18 more. The advisory does not name versions.

**Is there a fix for CVE-2026-20497?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2026-20497?** Check whether you run MediaTek Mt6989, MediaTek Mt6989 Firmware, MediaTek MT8755 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- MediaTek Mt6989
- MediaTek Mt6989 Firmware
- MediaTek MT8755
- MediaTek Mt8755 Firmware
- MediaTek Mt8768
- MediaTek Mt8768 Firmware
- MediaTek Mt8771
- MediaTek Mt8771 Firmware
- MediaTek MT8775
- MediaTek Mt8775 Firmware
- MediaTek Mt8781
- MediaTek Mt8781 Firmware
- MediaTek Mt8791t
- MediaTek Mt8791t Firmware
- MediaTek MT8792
- MediaTek Mt8792 Firmware
- MediaTek MT8796
- MediaTek Mt8796 Firmware
- MediaTek Mt8797
- MediaTek Mt8797 Firmware
- MediaTek Mt8798
- MediaTek Mt8798 Firmware

## Related threats

- [MediaTek GPU use after free leading to system crash](https://junglewise.ai/threats/cve-2026-20515-mediatek-gpu-use-after-free-leading-to-system-crash)
- [MediaTek Modem denial of service due to missing bounds check](https://junglewise.ai/threats/cve-2026-20504-mediatek-modem-denial-of-service-due-to-missing-bounds-check)
- [MediaTek Modem system crash due to missing bounds check](https://junglewise.ai/threats/cve-2026-20503-mediatek-modem-system-crash-due-to-missing-bounds-check)
- [MediaTek vdec out of bounds write](https://junglewise.ai/threats/cve-2026-20502-mediatek-vdec-out-of-bounds-write)
- [MediaTek vdec heap buffer overflow privilege escalation](https://junglewise.ai/threats/cve-2026-20501-mediatek-vdec-heap-buffer-overflow-privilege-escalation)