GSD-2023-21278 — Vulnetix

GSD-2023-21278 PUBLISHED

In multiple locations, there is a possible way to obscure the microphone privacy indicator due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Products

Vendor	Product	Versions
Google	Android	12, 13, *

Timeline

Nov 28, 2020 CVE Published

References

https://android.googlesource.com/platform/frameworks/base/+/49773f9d871dd8975128fccf71513928a5a97345 url
https://source.android.com/security/bulletin/2023-08-01 url

Open in Interactive Console →