CVE-2022-20446 in Androidthông tin

Tóm tắt

Bởi MITRE • 09/11/2022

In AlwaysOnHotwordDetector of AlwaysOnHotwordDetector.java, there is a possible way to access the microphone from the background due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-229793943

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Đặt trước

14/10/2021

Tiết lộ

09/11/2022

Kiểm duyệt

được chấp nhận

EPSS

0.00103

KEV

không

Các hoạt động

rất thấp

Nguồn

Do you want to use VulDB in your project?

Use the official API to access entries easily!