Skip to main content

MediaTek Chipset EUVDEUVD-2026-52087

| CVE-2026-20498 MEDIUM
Improper Validation of Specified Type of Input (CWE-1287)
2026-08-03 MediaTek GHSA-777x-vvpp-fv9v
6.0
CVSS 3.1 · Vendor: MediaTek
Share

Severity by source

Vendor (MediaTek) PRIMARY
6.0 MEDIUM
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
vuln.today AI
6.0 MEDIUM

Local-only access via geniezone and mandatory pre-existing System privilege justify AV:L and PR:H; no availability impact described.

3.1 AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
4.0 AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (MediaTek).

CVSS VectorVendor: MediaTek

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None

Lifecycle Timeline

3
Analysis Generated
Aug 03, 2026 - 20:34 vuln.today
CVSS changed
Aug 03, 2026 - 20:22 NVD
6.0 (MEDIUM)
CVE Published
Aug 03, 2026 - 02:06 cve.org
UNKNOWN (no severity yet)

DescriptionCVE.org

In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10900493; Issue ID: MSV-6765.

AnalysisAI

Privilege escalation in MediaTek's geniezone component affects ten specific chipset models (MT8792, MT8883, MT8873, MT8893, MT8768, MT8796, MT8799, MT6991, MT8791T, MT8910) due to a missing permission check classified under CWE-1287. An attacker who has already obtained System-level privileges on an affected device can exploit this flaw to escalate further - potentially reaching kernel or TEE-adjacent privilege boundaries - without requiring any user interaction. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Achieve System-level code execution
Delivery
Access geniezone kernel interface
Exploit
Trigger missing permission check
Execution
Escalate privilege beyond System boundary
Impact
Read sensitive data or modify protected system state

Vulnerability AssessmentAI

Exploitation Exploitation requires the attacker to have already achieved System-level code execution on the affected device - this is the mandatory and primary prerequisite. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 3.1 base score of 6.0 (AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) correctly reflects the significant prerequisite: System-level code execution on the target device must already be established. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker who has compromised an Android application or service running with System privileges on a device containing one of the ten affected MediaTek chipsets sends a crafted call to the geniezone interface, bypassing the missing permission check to invoke privileged operations. This allows the attacker to read sensitive data or alter system integrity at a privilege level above System without any victim interaction. …
Remediation Apply the MediaTek-issued patch identified as ALPS10900493 (Issue MSV-6765), disclosed in the MediaTek August 2026 Product Security Bulletin at https://www.mediatek.com/product-security-bulletin/August-2026. … Detailed patch versions, workarounds, and compensating controls in full report.

Threat intelligence, references, and detailed analysis are available after sign-in.

CVE-2026-20433 HIGH
8.8 Apr 07

Out-of-bounds write in MediaTek modem firmware enables remote privilege escalation when devices connect to attacker-cont

CVE-2026-20465 HIGH
8.1 Aug 03

Heap-based buffer overflow in the MediaTek WLAN AP driver enables an adjacent-network attacker to escalate privileges wi

CVE-2026-20432 HIGH
8.0 Apr 07

Out-of-bounds write in MediaTek modem chipset implementations allows remote privilege escalation when user equipment con

CVE-2026-20452 HIGH
8.0 Jun 01

Heap buffer overflow in the MediaTek WLAN access point driver allows adjacent-network attackers with low-privilege user

CVE-2026-20495 HIGH
7.8 Aug 03

Local privilege escalation in MediaTek's Bluetooth driver affects six Wi-Fi/Bluetooth combo chipsets (MT7902, MT7920, MT

CVE-2026-20455 HIGH
7.8 Jun 01

Local privilege escalation in MediaTek GenieZone (trusted execution environment) allows an attacker who has already gain

CVE-2026-20483 HIGH
7.7 Aug 03

Privilege escalation in MediaTek's Android Telephony component enables any locally-installed application - regardless of

CVE-2026-20479 HIGH
7.5 Aug 03

Out-of-bounds read in MediaTek modem firmware across 19 chipsets enables remote denial of service when a User Equipment

CVE-2026-20458 HIGH
7.5 Jul 01

Remote privilege escalation in the baseband modem firmware of dozens of MediaTek chipsets allows an attacker operating a

CVE-2026-20462 MEDIUM
6.7 Jul 01

Heap buffer overflow in the Telephony subsystem of MediaTek chipsets enables local privilege escalation on affected Andr

CVE-2026-20463 MEDIUM
6.7 Jul 01

Local privilege escalation in the Modem component across 80+ MediaTek chipsets allows an attacker already holding System

CVE-2026-20486 MEDIUM
6.7 Aug 03

Incorrect error handling in the MediaTek imgsensor (camera/image sensor) kernel driver across multiple MediaTek chipsets

Share

EUVD-2026-52087 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy