The vulnerability identified as CVE-2026-20497 involves an out-of-bounds write in the 'geniezone' component of MediaTek chipsets due to a missing bounds check. This flaw allows a local attacker, who already has System privilege, to escalate privileges further. The affected products include specific MediaTek chipset models: MT6989, MT8755, MT8768, MT8771, MT8775, MT8781, MT8792, MT8796, MT8797, and MT8798. There is no user interaction required for exploitation. The issue is tracked under MediaTek's internal IDs ALPS10965550 and ALPS11393405, with issue ID MSV-6941. No CVSS score or remediation level has been published yet.

The vulnerability allows a local attacker with existing System privileges to perform an out-of-bounds write, potentially leading to escalation of privilege. Since exploitation requires prior System privilege, the impact is limited to privilege escalation rather than initial compromise. There is no indication of remote exploitation or user interaction needed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official remediation level or patch links have been provided at this time. Monitor MediaTek advisories for updates and apply patches when available.