PT-2019-14201
CVE-2019-15472
·
تاريخ النشر
2019-11-14
·
تاريخ التحديث
2019-11-20
الوصف من
CVSS 2.0
2.1
منخفضةالمقاييسAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Xiaomi Mi A2 Lite Android device with a build fingerprint of xiaomi/daisy/daisy sprout:9/PKQ1.180917.001/V10.0.3.0.PDLMIXM:user/release-keys
com.qualcomm.qti.callenhancement app version 9 (versionCode=28)
Description
The issue allows unauthorized microphone audio recording via a confused deputy attack. This capability can be accessed by any app co-located on the device. The com.qualcomm.qti.callenhancement app enables a third-party app to use its open interface to record telephone calls to external storage.
Recommendations
For the Xiaomi Mi A2 Lite Android device, consider disabling the com.qualcomm.qti.callenhancement app until a patch is available.
For the com.qualcomm.qti.callenhancement app version 9, restrict access to its open interface to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾