Code injection

2023-08-1422:15:00

PRIOn knowledge base

www.prio-n.com

code injection

logic error

local privilege escalation

user interaction

4.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

In multiple locations, there is a possible way to obscure the microphone privacy indicator due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
androideq12.0
androideq13.0
androideq12.1

Name	Operator	Version
android	eq	12.0
android	eq	13.0
android	eq	12.1

References

android.googlesource.com/platform/frameworks/base/+/49773f9d871dd8975128fccf71513928a5a97345

source.android.com/security/bulletin/2023-08-01