Skip to content
OpenAdvisories
Medium · 6.7 CVE-2025-20707 EUVD-2025-26487GHSA-jwfg-ch33-r67h

In geniezone, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious …

Published Sep 1, 2025 · Updated Feb 26, 2026 · Assigned by MediaTek

Description

In geniezone, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09924201; Issue ID: MSV-3820.

Affected products

VendorProductAffectedFixed
MediaTek MT2718, MT6853, MT6877, MT6893, MT6899, MT6991, MT8196, MT8676, MT8678, MT8775, MT8786, MT8788E, MT8791T, MT8792, MT8796, MT8883, MT8893 Android 13.0, 14.0, 15.0 —

References