PT-2023-12659 · Google · Android

CVE-2022-20551

·

Publicado

2023-02-01

·

Atualizado

2023-03-09

CVSS v3.1

6.7

Média

VetorAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Android versions Android-12 through Android-13
Description The issue is related to a logic error in the code of AudioFlinger.cpp, specifically in the createTrack function. This error allows for the possibility of recording audio without a privacy indicator, which could lead to local escalation of privilege. System execution privileges are needed for exploitation, and user interaction is not required.
Recommendations For Android versions Android-12 through Android-13, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

ASB-A-243376549
CVE-2022-20551

Produtos afetados

Android