Google Android Elevation of Privilege Vulnerability (CNVD-2022-43851)

An elevation of privilege vulnerability exists in Google Android, a Linux-based open source operating system from Google, Inc. The vulnerability originates in adjustStreamVolume in AudioService.java, where an unprivileged application could potentially change the audio stream volume due to an...

PT-2021-13407

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a confused deputy in the adjustStreamVolume method of AudioService.java, allowing an unprivileged app to change the audio stream volume. This could lead to local escalation of...

PT-2021-13423

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue is related to a side channel information disclosure in the adjustStreamVolume function of AudioService.java. This could allow an attacker to determine whether an app is installe...

CVE-2021-1003: Externally Controlled Reference to a Resource in Another Sphere

In adjustStreamVolume of AudioService.java, there is a possible way for unprivileged app to change audio stream volume due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product...

CVE-2021-1018: Observable Discrepancy

In adjustStreamVolume of AudioService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is...

Google Android 安全漏洞

An elevation of privilege vulnerability exists in Google Android, a Linux-based open source operating system from Google, Inc. The vulnerability originates in adjustStreamVolume in AudioService.java, where an unprivileged application could potentially change the audio stream volume due to an...