This vulnerability (CVE-2026-20496) involves an out-of-bounds read (CWE-125) in the geniezone component of MediaTek chipsets. The root cause is a missing bounds check, which allows reading memory outside the intended buffer. Exploitation requires the attacker to have already obtained System privilege on the device, and no user interaction is needed. The impact is limited to local denial of service or potential information disclosure. The affected chipsets include MT6983, MT8676, MT8678, MT8755, MT8768, MT8771, MT8775, MT8781, MT8786, MT8792, MT8793, MT8796, MT8797, MT8798, MT8799, and MT8910. There is no vendor advisory or patch link provided, and the remediation level is unknown.

The vulnerability can lead to local denial of service or information disclosure if an attacker with System privilege exploits the out-of-bounds read. No remote exploitation or user interaction is required. The CVSS score is 4.4 (medium severity), reflecting the limited scope and required privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch link is provided, users should monitor MediaTek advisories for updates. No specific mitigations are indicated in the available data.