CVE-2026-20514: Medium severity vulnerability
In Audio HAL, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087632; Issue ID: MSV-8244.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ALPS11087632
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
Exploitation requires an attacker to have already obtained System privilege on the affected device. The resulting impact is local information disclosure.
Does exploitation require user interaction?
No. User interaction is not needed once the attacker has the required System privilege.
What identifier should be used to track the vendor fix?
The patch is identified as ALPS11087632. The associated issue ID is MSV-8244.