CVE Database
/

CVE-2022-20551

Back to search

CVE-2022-20551

Published: Feb 28, 2023

Modified: Mar 21, 2025

PUBLISHED

Description

In createTrack of AudioFlinger.cpp, there is a possible way to record audio without a privacy indicator due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-243376549

VendorProductVersions

n/a

Android

affected
Android-12 Android-12L Android-13

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now