{"id":"CVE-2026-20516","state":"PUBLISHED","title":"In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privileges needed. User int","description":"In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11060069 / DTV04881615; Issue ID: MSV-7882.","publishedAt":"2026-09-07T01:57:20.217Z","updatedAt":"2026-09-22T02:58:20.826Z","severity":{"score":5.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","source":"CISA-ADP"},"assigner":"MediaTek","products":["MediaTek, Inc. MediaTek chipset"],"affected":[{"vendor":"MediaTek, Inc.","product":"MediaTek chipset","defaultStatus":"unaffected","versions":[{"version":"MT5586","status":"affected"},{"version":"MT5836","status":"affected"},{"version":"MT5838","status":"affected"},{"version":"MT5867","status":"affected"},{"version":"MT9011","status":"affected"},{"version":"MT9012","status":"affected"},{"version":"MT9015","status":"affected"},{"version":"MT9022","status":"affected"},{"version":"MT9025","status":"affected"},{"version":"MT9026","status":"affected"},{"version":"MT9027","status":"affected"},{"version":"MT9032","status":"affected"},{"version":"MT9033","status":"affected"},{"version":"MT9216","status":"affected"},{"version":"MT9221","status":"affected"},{"version":"MT9256","status":"affected"},{"version":"MT9266","status":"affected"},{"version":"MT9270","status":"affected"},{"version":"MT9286","status":"affected"},{"version":"MT9603","status":"affected"},{"version":"MT9615","status":"affected"},{"version":"MT9617","status":"affected"},{"version":"MT9618","status":"affected"},{"version":"MT9633","status":"affected"},{"version":"MT9636","status":"affected"},{"version":"MT9638","status":"affected"},{"version":"MT9649","status":"affected"},{"version":"MT9660","status":"affected"},{"version":"MT9666","status":"affected"},{"version":"MT9667","status":"affected"},{"version":"MT9671","status":"affected"},{"version":"MT9676","status":"affected"},{"version":"MT9687","status":"affected"},{"version":"MT9688","status":"affected"},{"version":"MT9689","status":"affected"},{"version":"MT9952","status":"affected"},{"version":"MT9972","status":"affected"},{"version":"MT9979","status":"affected"},{"version":"MT9982","status":"affected"}]}],"references":["https://www.mediatek.com/product-security-bulletin/September-2026"],"weaknesses":["CWE-926"],"ingestedAt":"2026-10-29T20:11:10.572Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/20xxx/CVE-2026-20516.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-20516","state":"PUBLISHED","datePublished":"2026-09-07T01:57:20.217Z","dateUpdated":"2026-09-22T02:58:20.826Z","assignerShortName":"MediaTek","assignerOrgId":"ee979b05-11f8-4f25-a7e0-a1fa9c190374","dateReserved":"2025-11-03T01:30:59.031Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11060069 / DTV04881615; Issue ID: MSV-7882."}],"affected":[{"vendor":"MediaTek, Inc.","product":"MediaTek chipset","defaultStatus":"unaffected","versions":[{"version":"MT5586","status":"affected"},{"version":"MT5836","status":"affected"},{"version":"MT5838","status":"affected"},{"version":"MT5867","status":"affected"},{"version":"MT9011","status":"affected"},{"version":"MT9012","status":"affected"},{"version":"MT9015","status":"affected"},{"version":"MT9022","status":"affected"},{"version":"MT9025","status":"affected"},{"version":"MT9026","status":"affected"},{"version":"MT9027","status":"affected"},{"version":"MT9032","status":"affected"},{"version":"MT9033","status":"affected"},{"version":"MT9216","status":"affected"},{"version":"MT9221","status":"affected"},{"version":"MT9256","status":"affected"},{"version":"MT9266","status":"affected"},{"version":"MT9270","status":"affected"},{"version":"MT9286","status":"affected"},{"version":"MT9603","status":"affected"},{"version":"MT9615","status":"affected"},{"version":"MT9617","status":"affected"},{"version":"MT9618","status":"affected"},{"version":"MT9633","status":"affected"},{"version":"MT9636","status":"affected"},{"version":"MT9638","status":"affected"},{"version":"MT9649","status":"affected"},{"version":"MT9660","status":"affected"},{"version":"MT9666","status":"affected"},{"version":"MT9667","status":"affected"},{"version":"MT9671","status":"affected"},{"version":"MT9676","status":"affected"},{"version":"MT9687","status":"affected"},{"version":"MT9688","status":"affected"},{"version":"MT9689","status":"affected"},{"version":"MT9952","status":"affected"},{"version":"MT9972","status":"affected"},{"version":"MT9979","status":"affected"},{"version":"MT9982","status":"affected"}]}],"references":[{"url":"https://www.mediatek.com/product-security-bulletin/September-2026"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-926","type":"CWE","lang":"en","description":"CWE-926 Improper Export of Android Application Components"}]}],"providerMetadata":{"shortName":"MediaTek","orgId":"ee979b05-11f8-4f25-a7e0-a1fa9c190374","dateUpdated":"2026-09-22T02:58:20.826Z"},"x_generator":{"engine":"cvelib 1.8.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"timestamp":"2026-09-07T10:36:14.560696Z","id":"CVE-2026-20516","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-09-07T10:36:17.762Z"}}]}}}