CVE-2026-20513: Input Validation
In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087533; Issue ID: MSV-8245.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ALPS11087533
Event History
Frequently Asked Questions
Can an unprivileged Android app exploit this issue directly?
The reported attack requires an actor that has already obtained System privilege. The disclosure is local, so the issue is not described as remotely exploitable from an unprivileged position.
Is user interaction required once the attacker has the necessary privilege?
No. Exploitation does not require user interaction.
What identifier should teams use when checking for a vendor fix?
Track Patch ID ALPS11087533 and Issue ID MSV-8245 when confirming remediation status with the device or platform vendor.