6.7 Medium

CVE-2025-20707 In geniezone, there is a possible memory corruption due to use after free

Description

In geniezone, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09924201; Issue ID: MSV-3820.

Affected products and versions

Product	Affected versions	Fixed in
MT2718, MT6853, MT6877, MT6893, MT6899, MT6991, MT8196, MT8676, MT8678, MT8775, MT8786, MT8788E, MT8791T, MT8792, MT8796, MT8883, MT8893	Versions not published

Do you use MT2718, MT6853, MT6877, MT6893, MT6899, MT6991, MT8196, MT8676, MT8678, MT8775, MT8786, MT8788E, MT8791T, MT8792, MT8796, MT8883, MT8893?

Track this CVE Watch MT2718, MT6853, MT6877, MT6893, MT6899, MT6991, MT8196, MT8676, MT8678, MT8775, MT8786, MT8788E, MT8791T, MT8792, MT8796, MT8883, MT8893 Check my SBOMs

www.cveye.io/en/cve/CVE-2025-20707

Timeline

Published September 1, 2025
Last modified February 26, 2026

References

corp.mediatek.com corp.mediatek.com

Track this CVE