CVE-2026-20516 — MediaTek, Inc. / MediaTek chipset

Description (CNA)

In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11060069 / DTV04881615; Issue ID: MSV-7882.

Affected (CNA)

Vendor / product	Versions
MediaTek, Inc. / MediaTek chipset	affected MT5586; affected MT5836; affected MT5838; affected MT5867; affected MT9011; affected MT9012; affected MT9015; affected MT9022; affected MT9025; affected MT9026; affected MT9027; affected MT9032; affected MT9033; affected MT9216; affected MT9221; affected MT9256; affected MT9266; affected MT9270; affected MT9286; affected MT9603; affected MT9615; affected MT9617; affected MT9618; affected MT9633; affected MT9636; affected MT9638; affected MT9649; affected MT9660; affected MT9666; affected MT9667; affected MT9671; affected MT9676; affected MT9687; affected MT9688; affected MT9689; affected MT9952; affected MT9972; affected MT9979; affected MT9982

Vendor / product

Versions

MediaTek, Inc. / MediaTek chipset

affected MT5586; affected MT5836; affected MT5838; affected MT5867; affected MT9011; affected MT9012; affected MT9015; affected MT9022; affected MT9025; affected MT9026; affected MT9027; affected MT9032; affected MT9033; affected MT9216; affected MT9221; affected MT9256; affected MT9266; affected MT9270; affected MT9286; affected MT9603; affected MT9615; affected MT9617; affected MT9618; affected MT9633; affected MT9636; affected MT9638; affected MT9649; affected MT9660; affected MT9666; affected MT9667; affected MT9671; affected MT9676; affected MT9687; affected MT9688; affected MT9689; affected MT9952; affected MT9972; affected MT9979; affected MT9982

CWE

CWE-926

References

https://www.mediatek.com/product-security-bulletin/September-2026

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.