CVE-2026-58969

Unknown

Published: 02/11/2026(UTC)Translated: 02/11/2026(UTC)NVD NIST

Summary

In multiple functions of MediaQualityService.java, there is a permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

Risk Assessment

A local attacker could access information they are not authorized to see, compromising data confidentiality.

Recommendation

Update the system to a version that includes the fix adding the missing permission checks in MediaQualityService.java.

Other vulnerabilities in MediaQualityService.java

CVE-2026-58986Unknown
In notifyPictureProfileHandleSelection of MediaQualityService.java, there is a permission bypass due to a missing permission check. This could lead to local privilege escalation without additional execution privileges and without user interaction.

Original NVD description (English source)

In multiple functions of MediaQualityService.java, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS