CVE-2026-20447
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
In geniezone, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.
Risk Assessment
A local attacker with System privileges can gain higher privileges, potentially leading to full compromise of the device.
Recommendation
Apply patch ALPS10724073 provided by the vendor to address the missing bounds check.
Other vulnerabilities in geniezone
See all- CVE-2026-20518Medium
In geniezone, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation.
- CVE-2026-20517Medium
In geniezone, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.
- CVE-2026-20498Medium
In geniezone, a missing permission check allows escalation of privilege. A local attacker with System privileges can escalate further without user interaction.
- CVE-2026-20497Medium
In geniezone, a missing bounds check allows out-of-bounds write. A local attacker with System privileges can escalate privileges without user interaction.
- CVE-2026-20496Medium
In geniezone, a missing bounds check allows out-of-bounds read. A local attacker with System privileges can access sensitive information without user interaction.
- CVE-2026-20481Medium
In geniezone, a missing bounds check could lead to an out-of-bounds write, allowing local escalation of privilege if the attacker already has System privilege. No user interaction is needed.
- CVE-2026-20455High
In geniezone, a missing bounds check allows out-of-bounds write, potentially leading to local privilege escalation if the attacker already has System privilege. User interaction is not required.
- CVE-2026-20454Medium
In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10873936; Issue ID: MSV-6786.
- CVE-2026-20453Medium
In geniezone, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege if an attacker already has System privilege. User interaction is not required for exploitation.
- CVE-2026-20448Medium
In geniezone, a missing permission check may lead to local privilege escalation if a malicious actor already has System privilege. Exploitation does not require user interaction.
Original NVD description (English source)
In geniezone, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10724073; Issue ID: MSV-6296.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

