CVE-2024-31312

2024-07-0920:09:15

google_android

github.com

information leak

missing permission check

local disclosure

played media

user interaction

AI Score

6.2

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

In multiple locations, there is a possible information leak due to a missing permission check. This could lead to local information disclosure exposing played media with no additional execution privileges needed. User interaction is not needed for exploitation.

CNA Affected

[
  {
    "vendor": "Google",
    "product": "Android",
    "versions": [
      {
        "status": "affected",
        "version": "14"
      },
      {
        "status": "affected",
        "version": "13"
      },
      {
        "status": "affected",
        "version": "12L"
      },
      {
        "status": "affected",
        "version": "12"
      }
    ],
    "defaultStatus": "unaffected"
  }
]