PT-2026-45256 · Geniezone · Geniezone

Published 2026-06-01 · Updated 2026-06-01 · CVE-2026-20454

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions geniezone (affected versions not specified)

Description A race condition in geniezone can lead to an out-of-bounds write, which is a memory corruption error where data is written outside the intended boundary of a buffer. This flaw allows for local escalation of privilege if a malicious actor has already obtained System privilege. Exploitation does not require user interaction.

Recommendations Apply Patch ID ALPS10873936.

Fix

LPE

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

CVE-2026-20454

Affected Products

Geniezone

References · 4

• https://corp.mediatek.com/product-security-bulletin/June-2026 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-20454 · Security Note
• https://twitter.com/VulmonFeeds/status/2061326970932097188 · Twitter Post
• https://t.me/CVEtracker/55430 · Telegram Post