CVE-2026-20516 PUBLISHED

Assigner: MediaTek
Reserved: 03.11.2025 Published: 07.09.2026 Updated: 07.09.2026

In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11060069 / DTV04881615; Issue ID: MSV-7882.

Product Status

Vendor MediaTek, Inc.
Product MediaTek chipset
Versions Default: unaffected
  • Version MT5586 is affected
  • Version MT5862 is affected
  • Version MT5867 is affected
  • Version MT5870 is affected
  • Version MT5871 is affected
  • Version MT5872 is affected
  • Version MT5873 is affected
  • Version MT5876 is affected
  • Version MT5877 is affected
  • Version MT5879 is affected
  • Version MT5888 is affected
  • Version MT5889 is affected
  • Version MT5895 is affected
  • Version MT5896 is affected
  • Version MT5897 is affected
  • Version MT9015 is affected
  • Version MT9025 is affected
  • Version MT9026 is affected
  • Version MT9027 is affected
  • Version MT9032 is affected
  • Version MT9603 is affected
  • Version MT9618 is affected
  • Version MT9633 is affected
  • Version MT9649 is affected
  • Version MT9660 is affected
  • Version MT9676 is affected
  • Version MT9687 is affected
  • Version MT9689 is affected
  • Version MT9972 is affected

References

Problem Types

  • CWE-926 Improper Export of Android Application Components CWE