Permission Bypass Vulnerability in Media Quality Service by Android

CVE-2026-58986

What is CVE-2026-58986?

A vulnerability has been identified within the Media Quality Service where a missing permission check in the notifyPictureProfileHandleSelection method may allow local escalation of privilege. This flaw enables potential unauthorized access without requiring any additional execution privileges or user interaction, raising concerns about the integrity and security of the affected systems.

References