CVE-2023-20942 (Medium) detected in multiple libraries
mend-bolt-for-github opened this issue · 0 comments
mend-bolt-for-github commented
CVE-2023-20942 - Medium Severity Vulnerability
Vulnerable Libraries - avandroid-10.0.0_r37, avandroid-10.0.0_r37, avandroid-10.0.0_r37, avandroid-10.0.0_r37
Vulnerability Details
In openMmapStream of AudioFlinger.cpp, there is a possible way to record audio without displaying the microphone privacy indicator due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Publish Date: 2023-07-13
URL: CVE-2023-20942
CVSS 3 Score Details (5.5)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Local
- Attack Complexity: Low
- Privileges Required: Low
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: None
- Availability Impact: None
Step up your Open Source Security Game with Mend here