CVE-2026-20516
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Summary
In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11060069 / DTV04881615; Issue ID: MSV-7882.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| MediaTek, Inc. | MediaTek chipset | MT5586 | affected |
| MediaTek, Inc. | MediaTek chipset | MT5836 | affected |
| MediaTek, Inc. | MediaTek chipset | MT5838 | affected |
| MediaTek, Inc. | MediaTek chipset | MT5867 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9011 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9012 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9015 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9022 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9025 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9026 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9027 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9032 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9033 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9216 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9221 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9256 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9266 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9270 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9286 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9603 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9615 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9617 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9618 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9633 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9636 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9638 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9649 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9660 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9666 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9667 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9671 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9676 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9687 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9688 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9689 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9952 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9972 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9979 | affected |
| MediaTek, Inc. | MediaTek chipset | MT9982 | affected |
Weaknesses
- CWE-926: CWE-926 Improper Export of Android Application Components
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.