MediaTek MiracastService Privilege Escalation (CVE-2026-20516)
CVE-2026-20516 Published on September 7, 2026
In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11060069 / DTV04881615; Issue ID: MSV-7882.
Vulnerability Analysis
CVE-2026-20516 is exploitable with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.
Weakness Type
Improper Export of Android Application Components
The Android application exports a component for use by other applications, but does not properly restrict which applications can launch the component or access the data it contains.
Affected Versions
MediaTek, Inc. MediaTek chipset:- Version MT5586 is affected.
- Version MT5836 is affected.
- Version MT5838 is affected.
- Version MT5867 is affected.
- Version MT9011 is affected.
- Version MT9012 is affected.
- Version MT9015 is affected.
- Version MT9022 is affected.
- Version MT9025 is affected.
- Version MT9026 is affected.
- Version MT9027 is affected.
- Version MT9032 is affected.
- Version MT9033 is affected.
- Version MT9216 is affected.
- Version MT9221 is affected.
- Version MT9256 is affected.
- Version MT9266 is affected.
- Version MT9270 is affected.
- Version MT9286 is affected.
- Version MT9603 is affected.
- Version MT9615 is affected.
- Version MT9617 is affected.
- Version MT9618 is affected.
- Version MT9633 is affected.
- Version MT9636 is affected.
- Version MT9638 is affected.
- Version MT9649 is affected.
- Version MT9660 is affected.
- Version MT9666 is affected.
- Version MT9667 is affected.
- Version MT9671 is affected.
- Version MT9676 is affected.
- Version MT9687 is affected.
- Version MT9688 is affected.
- Version MT9689 is affected.
- Version MT9952 is affected.
- Version MT9972 is affected.
- Version MT9979 is affected.
- Version MT9982 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.