PT-2022-14774 · Google · Android Kernel

Published 2022-12-16 · Updated 2023-08-08 · CVE-2022-20562

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android kernel

Description A logic error in the code of ap input processor.c functions could allow recording audio during a phone call, leading to local information disclosure. This issue requires User execution privileges and does not need user interaction for exploitation.

Recommendations For Android kernel, consider restricting access to sensitive audio processing functions until a patch is available. As a temporary workaround, disabling the audio recording feature during phone calls may help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

CVE-2022-20562

Affected Products

Android Kernel

References · 2

• https://source.android.com/security/bulletin/pixel/2022-12-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-20562 · Security Note