MediaTek MiracastService Privilege Escalation (CVE-2026-20516)
CVE-2026-20516 Published on September 7, 2026
In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11060069 / DTV04881615; Issue ID: MSV-7882.
Vulnerability Analysis
CVE-2026-20516 is exploitable with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.
Weakness Type
Improper Export of Android Application Components
The Android application exports a component for use by other applications, but does not properly restrict which applications can launch the component or access the data it contains.
Affected Versions
MediaTek, Inc. MediaTek chipset:- Version MT5586 is affected.
- Version MT5862 is affected.
- Version MT5867 is affected.
- Version MT5870 is affected.
- Version MT5871 is affected.
- Version MT5872 is affected.
- Version MT5873 is affected.
- Version MT5876 is affected.
- Version MT5877 is affected.
- Version MT5879 is affected.
- Version MT5888 is affected.
- Version MT5889 is affected.
- Version MT5895 is affected.
- Version MT5896 is affected.
- Version MT5897 is affected.
- Version MT9015 is affected.
- Version MT9025 is affected.
- Version MT9026 is affected.
- Version MT9027 is affected.
- Version MT9032 is affected.
- Version MT9603 is affected.
- Version MT9618 is affected.
- Version MT9633 is affected.
- Version MT9649 is affected.
- Version MT9660 is affected.
- Version MT9676 is affected.
- Version MT9687 is affected.
- Version MT9689 is affected.
- Version MT9972 is affected.