← Database

CVE-2009-2348

MEDIUM CVSS: 6.9 Published: 2009-07-17 Modified: 2026-06-16

Description

Android 1.5 CRBxx allows local users to bypass the (1) Manifest.permission.CAMERA (aka android.permission.CAMERA) and (2) Manifest.permission.AUDIO_RECORD (aka android.permission.RECORD_AUDIO) configuration settings by installing and executing an application that does not make a permission request before using the camera or microphone.

Affected Platforms

Google Android

Weakness Type

CWE-94

References