CVE Catalog

CVE-2026-20447

MediumCVSS 6.7
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.11%

2th percentile - higher than 2% of all known CVEs

Summary

In geniezone, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.

Risk Assessment

A local attacker with System privileges can gain higher privileges, potentially leading to full compromise of the device.

Recommendation

Apply patch ALPS10724073 provided by the vendor to address the missing bounds check.

Other vulnerabilities in geniezone

See all
Original NVD description (English source)

In geniezone, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10724073; Issue ID: MSV-6296.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS