# CVE-2026-20498: In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local…

Source: https://junglewise.ai/threats/cve-2026-20498-in-geniezone-there-is-a-possible-escalation-of-privilege-due-to-a  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-03  
License: CC BY 4.0 with a link back

CVE-2026-20498 · Severity: medium · CVSS 6 · Published 2026-08-03

In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10900493; Issue ID: MSV-6765.

Technologies: [MediaTek Mt6991](https://junglewise.ai/threats/technologies/mt6991), [MediaTek Mt6991 Firmware](https://junglewise.ai/threats/technologies/mt6991-firmware), [MediaTek Mt8768](https://junglewise.ai/threats/technologies/mt8768), [MediaTek Mt8768 Firmware](https://junglewise.ai/threats/technologies/mt8768-firmware), [MediaTek Mt8791t](https://junglewise.ai/threats/technologies/mt8791t), [MediaTek Mt8791t Firmware](https://junglewise.ai/threats/technologies/mt8791t-firmware), [MediaTek MT8792](https://junglewise.ai/threats/technologies/mt8792), [MediaTek Mt8792 Firmware](https://junglewise.ai/threats/technologies/mt8792-firmware), [MediaTek MT8796](https://junglewise.ai/threats/technologies/mt8796), [MediaTek Mt8796 Firmware](https://junglewise.ai/threats/technologies/mt8796-firmware), [MediaTek Mt8799](https://junglewise.ai/threats/technologies/mt8799), [MediaTek Mt8799 Firmware](https://junglewise.ai/threats/technologies/mt8799-firmware), [MediaTek MT8873](https://junglewise.ai/threats/technologies/mt8873), [MediaTek Mt8873 Firmware](https://junglewise.ai/threats/technologies/mt8873-firmware), [MediaTek MT8883](https://junglewise.ai/threats/technologies/mt8883), [MediaTek Mt8883 Firmware](https://junglewise.ai/threats/technologies/mt8883-firmware), [MediaTek MT8893](https://junglewise.ai/threats/technologies/mt8893), [MediaTek Mt8893 Firmware](https://junglewise.ai/threats/technologies/mt8893-firmware), [MediaTek Mt8910](https://junglewise.ai/threats/technologies/mt8910), [MediaTek Mt8910 Firmware](https://junglewise.ai/threats/technologies/mt8910-firmware). Vendors: [MediaTek](https://junglewise.ai/threats/vendors/mediatek).

## Quick answers

**Is CVE-2026-20498 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-20498 being exploited in the wild.

**How severe is CVE-2026-20498?** Medium severity, with a CVSS score of 6, published 3 August 2026.

**Which products and versions are affected?** MediaTek Mt6991, MediaTek Mt6991 Firmware, MediaTek Mt8768, MediaTek Mt8768 Firmware and 16 more. The advisory does not name versions.

**Is there a fix for CVE-2026-20498?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2026-20498?** Check whether you run MediaTek Mt6991, MediaTek Mt6991 Firmware, MediaTek Mt8768 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- MediaTek Mt6991
- MediaTek Mt6991 Firmware
- MediaTek Mt8768
- MediaTek Mt8768 Firmware
- MediaTek Mt8791t
- MediaTek Mt8791t Firmware
- MediaTek MT8792
- MediaTek Mt8792 Firmware
- MediaTek MT8796
- MediaTek Mt8796 Firmware
- MediaTek Mt8799
- MediaTek Mt8799 Firmware
- MediaTek MT8873
- MediaTek Mt8873 Firmware
- MediaTek MT8883
- MediaTek Mt8883 Firmware
- MediaTek MT8893
- MediaTek Mt8893 Firmware
- MediaTek Mt8910
- MediaTek Mt8910 Firmware

## Related threats

- [MediaTek GPU use after free leading to system crash](https://junglewise.ai/threats/cve-2026-20515-mediatek-gpu-use-after-free-leading-to-system-crash)
- [MediaTek Modem denial of service due to missing bounds check](https://junglewise.ai/threats/cve-2026-20504-mediatek-modem-denial-of-service-due-to-missing-bounds-check)
- [MediaTek Modem system crash due to missing bounds check](https://junglewise.ai/threats/cve-2026-20503-mediatek-modem-system-crash-due-to-missing-bounds-check)
- [MediaTek vdec out of bounds write](https://junglewise.ai/threats/cve-2026-20502-mediatek-vdec-out-of-bounds-write)
- [MediaTek vdec heap buffer overflow privilege escalation](https://junglewise.ai/threats/cve-2026-20501-mediatek-vdec-heap-buffer-overflow-privilege-escalation)