CVE-2023-20942

In openMmapStream of AudioFlinger.cpp, there is a possible way to record audio without displaying the microphone privacy indicator due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

• CWE-326

• https://android.googlesource.com/platform/frameworks/av/+/770b45c3c1619cf4008b89e7a0f4392bf2224bbcPatch
• https://android.googlesource.com/platform/frameworks/av/+/b072419650958c41c87d2baa572dc2fe6da9ea6bPatch
• https://android.googlesource.com/platform/frameworks/av/+/bae3b00a5873d1562679a1289fd8490178cfe064Patch
• https://source.android.com/security/bulletin/2023-07-01Patch, Vendor Advisory
• https://android.googlesource.com/platform/frameworks/av/+/770b45c3c1619cf4008b89e7a0f4392bf2224bbcPatch
• https://android.googlesource.com/platform/frameworks/av/+/b072419650958c41c87d2baa572dc2fe6da9ea6bPatch
• https://android.googlesource.com/platform/frameworks/av/+/bae3b00a5873d1562679a1289fd8490178cfe064Patch
• https://source.android.com/security/bulletin/2023-07-01Patch, Vendor Advisory

Published

Jul 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-20937In several functions of the Android Linux kernel, there is a…7.8
• CVE-2023-20938In binder_transaction_buffer_release of binder.c, there is a…7.8
• CVE-2023-20939In multiple functions of looper_backed_event_loop.cpp, there…7.8
• CVE-2023-2094A vulnerability has been found in SourceCodester Vehicle Ser…6.3
• CVE-2023-20940In the Android operating system, there is a possible way to …7.8
• CVE-2023-20941In acc_ctrlrequest_composite of f_accessory.c, there is a po…6.6
• CVE-2023-20943In clearApplicationUserData of ActivityManagerService.java, …7.8
• CVE-2023-20944In run of ChooseTypeAndAccountActivity.java, there is a poss…7.8
• CVE-2023-20945In phNciNfc_MfCreateXchgDataHdr of phNxpExtns_MifareStd.cpp,…7.8
• CVE-2023-20946In onStart of BluetoothSwitchPreferenceController.java, ther…9.8
• CVE-2023-20947In getGroupState of GrantPermissionsViewModel.kt, there is a…7.8
• CVE-2023-20948In dropFramesUntilIframe of AAVCAssembler.cpp, there is a po…7.5