7 matches found
CVE-2023-40096
In OpRecordAudioMonitor::onFirstRef of AudioRecordClient.cpp, there is a possible way to record audio from the background due to a missing flag. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48549
In multiple locations, there is a possible way to record audio via a background app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2025-36070
Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A missing permission check could allow recording audio via a background application, potentially leading to local escalation of privilege. User interaction is not required for exploitation...
CVE-2019-2219
In several functions of NotificationManagerService.java and related files, there is a possible way to record audio from the background without notification to the user due to a permission bypass. This could lead to local escalation of privilege with User execution privileges needed. User...
PT-2019-16302
Name of the Vulnerable Software and Affected Versions Android version 11 Description A permission bypass issue in several functions of NotificationManagerService.java and related files allows for the possibility of recording audio from the background without notifying the user. This could lead to...
CVE-2019-9364
In AudioService, there is a possible trigger of background user audio due to a permissions bypass. This could lead to local information disclosure by playing the background user's audio with no additional execution privileges needed. User interaction is not needed for exploitation. Product:...
Information disclosure
In AudioService, there is a possible trigger of background user audio due to a permissions bypass. This could lead to local information disclosure by playing the background user's audio with no additional execution privileges needed. User interaction is not needed for exploitation. Product:...