Google Android elevation of privilege vulnerability (CNVD-2023-26070)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that originates from a privilege bypass in resolveAttributionSource of ServiceUtilities.cpp, which can be exploited by an attacker to gain elevated...

CVE-2023-20934

In resolveAttributionSource of ServiceUtilities.cpp, there is a possible way to disable the microphone privacy indicator due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2023-20934

CVE-2023-20934 affects Android 12/12L/13. Root cause: in resolveAt attributionSource of ServiceUtilities.cpp, a permissions bypass could disable the microphone privacy indicator, enabling local elevation of privilege with no user interaction. Impact per sources is high (local, with confidentialit...