CVE-2026-20454

In geniezone, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation.

In geniezone, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.

In geniezone, a missing permission check allows escalation of privilege. A local attacker with System privileges can escalate further without user interaction.

In geniezone, a missing bounds check allows out-of-bounds write. A local attacker with System privileges can escalate privileges without user interaction.

In geniezone, a missing bounds check allows out-of-bounds read. A local attacker with System privileges can access sensitive information without user interaction.

In geniezone, a missing bounds check could lead to an out-of-bounds write, allowing local escalation of privilege if the attacker already has System privilege. No user interaction is needed.

In geniezone, a missing bounds check allows out-of-bounds write, potentially leading to local privilege escalation if the attacker already has System privilege. User interaction is not required.

In geniezone, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege if an attacker already has System privilege. User interaction is not required for exploitation.

In the geniezone component, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained System privilege. User interaction is not needed for exploitation.