CVE-2019-2219
In several functions of NotificationManagerService.java and related files, there is a possible way to record audio from the background without notification to the user due to a permission bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-119041698
- Score
- CVSS 3.1 4.7 Medium
- Status
- Modified - security@android.com
- Published
- 2019-12-06
- Last modified
- 2024-08-04
- Weaknesses
- CWE-362
Affected products
References
- https://source.android.com/security/bulletin/2021-05-01