ASB-A-293603271 PUBLISHED

In multiple functions of AppOpsControllerImpl.java, there is a possible way to record audio without displaying the privacy indicator due to a race condition. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.

Affected Products

VendorProductVersions
platformframeworks/base14, 16-next:0, 16-next
platformframeworks/av16-next:0, 16-next, 15:0

Timeline

References

Open in Interactive Console →