CVE-2026-20516

Summary

In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11060069 / DTV04881615; Issue ID: MSV-7882.

Affected Software

VendorProductVersion RangeStatus
MediaTek, Inc.MediaTek chipsetMT5586affected
MediaTek, Inc.MediaTek chipsetMT5862affected
MediaTek, Inc.MediaTek chipsetMT5867affected
MediaTek, Inc.MediaTek chipsetMT5870affected
MediaTek, Inc.MediaTek chipsetMT5871affected
MediaTek, Inc.MediaTek chipsetMT5872affected
MediaTek, Inc.MediaTek chipsetMT5873affected
MediaTek, Inc.MediaTek chipsetMT5876affected
MediaTek, Inc.MediaTek chipsetMT5877affected
MediaTek, Inc.MediaTek chipsetMT5879affected
MediaTek, Inc.MediaTek chipsetMT5888affected
MediaTek, Inc.MediaTek chipsetMT5889affected
MediaTek, Inc.MediaTek chipsetMT5895affected
MediaTek, Inc.MediaTek chipsetMT5896affected
MediaTek, Inc.MediaTek chipsetMT5897affected
MediaTek, Inc.MediaTek chipsetMT9015affected
MediaTek, Inc.MediaTek chipsetMT9025affected
MediaTek, Inc.MediaTek chipsetMT9026affected
MediaTek, Inc.MediaTek chipsetMT9027affected
MediaTek, Inc.MediaTek chipsetMT9032affected
MediaTek, Inc.MediaTek chipsetMT9603affected
MediaTek, Inc.MediaTek chipsetMT9618affected
MediaTek, Inc.MediaTek chipsetMT9633affected
MediaTek, Inc.MediaTek chipsetMT9649affected
MediaTek, Inc.MediaTek chipsetMT9660affected
MediaTek, Inc.MediaTek chipsetMT9676affected
MediaTek, Inc.MediaTek chipsetMT9687affected
MediaTek, Inc.MediaTek chipsetMT9689affected
MediaTek, Inc.MediaTek chipsetMT9972affected

Weaknesses

  • CWE-926: CWE-926 Improper Export of Android Application Components

References