CVE-2026-20497

A missing bounds check in geniezone leads to a possible out of bounds write . This vulnerability could allow a malicious actor with existing System privilege to achieve local escalation of privilege . Exploitation does not require user interaction. Remediation is available via Patch IDs ALPS10965...

CVE-2025-20659

A security vulnerability exists in MediaTek chipsets' Modem component due to improper input validation and reading data outside the permitted range in memory. This flaw allows a remote attacker to trigger a system crash , resulting in a remote denial of service (DoS) . The attack can be executed ...

CVE-2026-20498

The geniezone software is vulnerable to a local escalation of privilege caused by a missing permission check . This vulnerability allows an attacker who has already obtained System privilege to escalate their privileges further without requiring user interaction. To remediate this issue, users sh...

CVE-2026-20481

A missing bounds check in geniezone leads to a possible out of bounds write . This vulnerability could allow a malicious actor who has already obtained System privilege to achieve a local escalation of privilege . Exploitation does not require user interaction. Remediation is available via Patch ...

CVE-2026-20496

The geniezone component is vulnerable to an out of bounds read due to a missing bounds check. An attacker who has already obtained System privilege can exploit this to cause local information disclosure . No user interaction is required for exploitation. Remediation is available via Patch ID: ALP...

CVE-2026-20451

A type confusion vulnerability in slbc (associated with MediaTek Chipsets ) allows for an out-of-bounds write . This flaw could enable a malicious actor who has already obtained System privileges to achieve local escalation of privilege . Exploitation does not require user interaction. Remediatio...

CVE-2026-20483

A vulnerability exists in Telephony due to a missing permission check , which can lead to a local escalation of privilege . This flaw allows an attacker to gain elevated privileges without requiring additional execution privileges or user interaction. Remediation information is provided via Patch...

CVE-2026-20448

The geniezone component is susceptible to a local escalation of privilege due to a missing permission check . A malicious actor who has already obtained System privilege can exploit this flaw to increase their local permissions without requiring any user interaction. Affected versions are not exp...

CVE-2026-20503

A missing bounds check in the Modem component can lead to a system crash , resulting in a remote denial of service . This vulnerability can be exploited if a User Equipment (UE) connects to a rogue base station controlled by an attacker. The exploit requires no additional execution privileges and...