In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privileges needed. User interaction is not nee…

Medium CVSS 5.5

CVECVE-2026-20516

First seen2026-09-22 04:15 UTC

Disclosed2026-09-07 02:17 UTC

Last updated2026-09-22 04:15 UTC

Channel statusauto

Summary

In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11060069 / DTV04881615; Issue ID: MSV-7882.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Sources

NVD DATABASE

Original Links

https://www.mediatek.com/product-security-bulletin/September-2026

Timeline

2026-09-22 nvd_ingest NVD