CVE-2026-20516
Received Received - Intake

Privilege Escalation in MiracastService

Vulnerability report for CVE-2026-20516, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-09-07

Last updated on: 2026-09-07

Assigner: MediaTek, Inc.

Description

In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11060069 / DTV04881615; Issue ID: MSV-7882.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-07
Last Modified
2026-09-07
Generated
2026-09-07
AI Q&A
2026-09-07
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
mediatek miracastservice *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-926 The Android application exports a component for use by other applications, but does not properly restrict which applications can launch the component or access the data it contains.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in MiracastService allows a local attacker to escalate privileges due to a confused deputy issue. It could result in a denial of service attack with only user execution privileges required. No user interaction is needed for exploitation.

Impact Analysis

An attacker could exploit this to cause a local denial of service on your device. Since user execution privileges are sufficient, it may affect devices using MiracastService without requiring additional user actions.

Mitigation Strategies

Apply the provided patch (ALPS11060069 / DTV04881615) to address the confused deputy issue in MiracastService. Ensure the patch is installed to prevent local denial of service with User execution privileges.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-20516. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart