CVE-2019-2219 - CERT CVE
ID CVE-2019-2219
Sažetak In several functions of NotificationManagerService.java and related files, there is a possible way to record audio from the background without notification to the user due to a permission bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-119041698
Reference
CVSS
Base: 4.7
Impact: 6.9
Exploitability:3.4
Pristup
VektorSloženostAutentikacija
LOCAL MEDIUM NONE
Impact
PovjerljivostCjelovitostDostupnost
COMPLETE NONE NONE
CVSS vektor AV:L/AC:M/Au:N/C:C/I:N/A:N
Zadnje važnije ažuriranje 21-06-2021 - 14:15
Objavljeno 06-12-2019 - 23:15