Unscored CVE-2023-21262 EUVD-2023-25430GHSA-2h34-5q7q-g4h6

In startInput of AudioPolicyInterfaceImpl.cpp, there is a possible way of erroneously displaying the microphone privacy indicator due to a …

Published Jul 12, 2023 · Updated Nov 6, 2024 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In startInput of AudioPolicyInterfaceImpl.cpp, there is a possible way of erroneously displaying the microphone privacy indicator due to a race condition. This could lead to false user expectations. User interaction is needed for exploitation.

Affected products

Vendor	Product	Affected	Fixed
Google	Android	13, 12L, 12	—

Advisories 2

WID-SEC-2023-1669 Android Patchday Juli 2023 BSI CERT-Bund (WID) · Sep 6, 2023
WID-SEC-2023-1672 Samsung Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 5, 2023

References

https://android.googlesource.com/platform/frameworks/av/+/2c8973c39478cd3c8cf11d9f27cc0556a106d006
https://source.android.com/security/bulletin/2023-07-01