Lucene search

K
osvGoogleOSV:ASB-A-279905816
HistoryJul 01, 2023 - 12:00 a.m.

WhatsApp able to use microphone even after permissions revoked & app force stop in Android 13 Pixel 6

2023-07-0100:00:00
Google
osv.dev
8
whatsapp
microphone
privacy indicator
race condition
android 13
pixel 6
exploitation
user interaction

CVSS3

3.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

30.4%

In startInput of AudioPolicyInterfaceImpl.cpp, there is a possible way of erroneously displaying the microphone privacy indicator due to a race condition. This could lead to false user expectations. User interaction is needed for exploitation.

CVSS3

3.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

30.4%

Related for OSV:ASB-A-279905816