Race condition vulnerability in startInput of AudioPolicyInterfaceImpl.cpp could lead to false microphone privacy indicator display

CVE-2023-21262 · LOW Severity

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

In startInput of AudioPolicyInterfaceImpl.cpp, there is a possible way of erroneously displaying the microphone privacy indicator due to a race condition. This could lead to false user expectations. User interaction is needed for exploitation.

Learn more about our User Device Pen Test.