ASB-A-325912429 PUBLISHED

In multiple locations, there is a possible way to record audio via a background app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Products

VendorProductVersions
platformframeworks/base14, 16-next:0, 16-next
platformframeworks/av16-next:0, 16-next, 15:0

Timeline

References

Open in Interactive Console →