CVE-2026-58986
UnknownSummary
In notifyPictureProfileHandleSelection of MediaQualityService.java, there is a permission bypass due to a missing permission check. This could lead to local privilege escalation without additional execution privileges and without user interaction.
Risk Assessment
A local attacker could bypass permission controls and gain access to functions or data requiring higher privileges. This may compromise the confidentiality and integrity of media data.
Recommendation
Update Android to a version containing the fix. Consider restricting access to media services for untrusted applications.
Other vulnerabilities in MediaQualityService.java
Original NVD description (English source)
In notifyPictureProfileHandleSelection of MediaQualityService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS