CVE-2026-70380: Resource Exhaustion in MICE Service
A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment (MICE) service. An unauthenticated attacker with network access to the MICE service could consume available connection capacity, preventing legitimate users from establishing MICE-based Miracast connections while the condition persists. Miracast P2P is not affected. MICE is disabled in the default configuration and must be explicitly enabled by the customer. On most devices, Miracast P2P is available independently of MICE, but a complete disruption of Miracast can occur on some devices when WLAN is configured for Infrastructure mode.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Only deployments where the MICE service has been explicitly enabled are exposed, because MICE is disabled by default. Miracast peer-to-peer is not affected.
What does an attacker need to exploit the vulnerability?
An attacker needs network access to the MICE service. No authentication or user interaction is required.
What is the operational impact?
An attacker can consume available MICE connection capacity, preventing legitimate users from establishing MICE-based Miracast connections while the condition persists. On some devices using WLAN Infrastructure mode, this can result in complete Miracast disruption.
What can be done if patching is not immediately possible?
Disable MICE if it is not required, or restrict network access to the MICE service to reduce exposure. Miracast P2P remains available independently of MICE on most devices.