In startInput of AudioPolicyInterfaceImpl.cpp, there is a possible way of erroneously displaying the microphone privacy indicator due to a race condition. This could lead to false user expectations. User interaction is needed for exploitation.
{
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/frameworks/av/+/e7720b379bfaba648ab6d85c4c2df6f03ec854d3"
],
"spl": "2023-07-01",
"vanir_signatures": [
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/e7720b379bfaba648ab6d85c4c2df6f03ec854d3",
"target": {
"file": "services/audiopolicy/service/AudioPolicyInterfaceImpl.cpp"
},
"deprecated": false,
"digest": {
"line_hashes": [
"67143875893967174446343595869907359589",
"335933756978326126128445272841882169407",
"161054698725540581191784931932070923553",
"256632137180800739713874103518187499580",
"153292489787064717128127344459399158964"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-279905816-5f328cb7"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/e7720b379bfaba648ab6d85c4c2df6f03ec854d3",
"target": {
"function": "AudioPolicyService::startInput",
"file": "services/audiopolicy/service/AudioPolicyInterfaceImpl.cpp"
},
"deprecated": false,
"digest": {
"function_hash": "257804868916410060081743080434630063057",
"length": 3372.0
},
"signature_type": "Function",
"id": "ASB-A-279905816-64b177a6"
}
],
"types": [
"EoP"
]
}
{
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/frameworks/av/+/12e41309c3e6bde85430c288e469fc1776835db0"
],
"spl": "2023-07-01",
"vanir_signatures": [
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/12e41309c3e6bde85430c288e469fc1776835db0",
"target": {
"function": "AudioPolicyService::startInput",
"file": "services/audiopolicy/service/AudioPolicyInterfaceImpl.cpp"
},
"deprecated": false,
"digest": {
"function_hash": "31525562217185009710177359193697764237",
"length": 3251.0
},
"signature_type": "Function",
"id": "ASB-A-279905816-1c277810"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/12e41309c3e6bde85430c288e469fc1776835db0",
"target": {
"file": "services/audiopolicy/service/AudioPolicyInterfaceImpl.cpp"
},
"deprecated": false,
"digest": {
"line_hashes": [
"67143875893967174446343595869907359589",
"335933756978326126128445272841882169407",
"161054698725540581191784931932070923553",
"256632137180800739713874103518187499580",
"153292489787064717128127344459399158964"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-279905816-a4eac14b"
}
],
"types": [
"EoP"
]
}
{
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/frameworks/av/+/12e41309c3e6bde85430c288e469fc1776835db0"
],
"spl": "2023-07-01",
"vanir_signatures": [
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/12e41309c3e6bde85430c288e469fc1776835db0",
"target": {
"function": "AudioPolicyService::startInput",
"file": "services/audiopolicy/service/AudioPolicyInterfaceImpl.cpp"
},
"deprecated": false,
"digest": {
"function_hash": "31525562217185009710177359193697764237",
"length": 3251.0
},
"signature_type": "Function",
"id": "ASB-A-279905816-082ee070"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/12e41309c3e6bde85430c288e469fc1776835db0",
"target": {
"file": "services/audiopolicy/service/AudioPolicyInterfaceImpl.cpp"
},
"deprecated": false,
"digest": {
"line_hashes": [
"67143875893967174446343595869907359589",
"335933756978326126128445272841882169407",
"161054698725540581191784931932070923553",
"256632137180800739713874103518187499580",
"153292489787064717128127344459399158964"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-279905816-899f11f6"
}
],
"types": [
"EoP"
]
}
{
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/frameworks/av/+/2951ad10a6641f9b3554d674877ad314e8cc011f"
],
"spl": "2023-07-01",
"vanir_signatures": [
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/2951ad10a6641f9b3554d674877ad314e8cc011f",
"target": {
"file": "services/audiopolicy/service/AudioPolicyInterfaceImpl.cpp"
},
"deprecated": false,
"digest": {
"line_hashes": [
"67143875893967174446343595869907359589",
"335933756978326126128445272841882169407",
"161054698725540581191784931932070923553",
"256632137180800739713874103518187499580",
"153292489787064717128127344459399158964"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-279905816-68d1362f"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/2951ad10a6641f9b3554d674877ad314e8cc011f",
"target": {
"function": "AudioPolicyService::startInput",
"file": "services/audiopolicy/service/AudioPolicyInterfaceImpl.cpp"
},
"deprecated": false,
"digest": {
"function_hash": "257804868916410060081743080434630063057",
"length": 3372.0
},
"signature_type": "Function",
"id": "ASB-A-279905816-cb0b9985"
}
],
"types": [
"EoP"
]
}