CVE-2019-15474

CVE-2019-15474 relates to the Xiaomi Cepheus Android device where a pre-installed app, com.qualcomm.qti.callenhancement, can be abused via a confused deputy attack. The app exposes an interface that lets any co-located app perform unauthorized microphone audio recording, saving recordings to exte...