CVE-2026-20507

In Audio HAL, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed.

In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed.

In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed.

In Audio HAL, there is a possible escalation of privilege due to use-after-free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed.

In Audio HAL, there is a possible system unresponsiveness due to a race condition. This could lead to local denial of service, requiring User execution privileges. User interaction is not required for exploitation.

In Audio HAL, a heap buffer overflow could lead to an out-of-bounds write, causing local denial of service. User execution privileges are required, but no user interaction is needed.

In Audio HAL, a heap buffer overflow could lead to an out-of-bounds write, causing local denial of service. User execution privileges are required, but no user interaction is needed.