This vulnerability (CVE-2026-20481) involves an out-of-bounds write in the geniezone component of MediaTek chipsets due to a missing bounds check. A local attacker who already has System privileges could exploit this flaw to escalate privileges further. The vulnerability affects multiple MediaTek chipset models including MT6989, MT8755, MT8768, MT8771, MT8775, MT8781, MT8792, MT8793, MT8796, MT8797, MT8798, MT8799, and MT8910. There is no user interaction required for exploitation. The CVSS v3.1 base score is 6.0 (AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N). No official patch or remediation level has been published yet.

Successful exploitation could lead to local escalation of privilege on affected MediaTek chipsets, allowing an attacker with existing System privileges to gain higher privileges. Confidentiality and integrity impacts are high, but availability is not affected. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor MediaTek advisories for updates. Exploitation requires local System privileges, so limiting local access and maintaining strict privilege controls may reduce risk.