Permission Bypass Vulnerability in MediaQualityService by Android
CVE-2026-58969

Currently unrated

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
2 November 2026

What is CVE-2026-58969?

A vulnerability has been identified within the MediaQualityService due to a missing permission check in several functions. This oversight can allow unauthorized access to local information, without requiring additional execution privileges or user interaction. Such a loophole poses significant risks as it opens pathways for attackers to disclose sensitive data within the affected systems.

Affected Version(s)

Android 17

Android 16-qpr2

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.