ZeroDay Findings
Sign inSign up

Findings

CVE-2019-2219

In several functions of NotificationManagerService.java and related files, there is a possible way to record audio from the background without notification to the user due to a per

Published May 1, 2021 · updated Oct 14, 2026

In several functions of NotificationManagerService.java and related files, there is a possible way to record audio from the background without notification to the user due to a permission bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

Timeline

Detection, updates, and resolution for this record.

  1. May 1, 2021 · Catalog

    Detected

    In several functions of NotificationManagerService.java and related files, there is a possible way to record audio from the background without notification to the user due to a permission bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

  2. Oct 13, 2026 · Catalog

    Fix available

    Android platform/frameworks/base 11:0 → 11:2021-05-05

  3. Oct 13, 2026 · OSV.dev

    Fix available

    platform/frameworks/base fixed in 11:2021-05-05

  4. Oct 13, 2026 · OSV.dev

    Fix available

    platform/frameworks/base fixed in 11:2021-05-05

  5. Oct 13, 2026 · Catalog

    Updated

    In several functions of NotificationManagerService.java and related files, there is a possible way to record audio from the background without notification to the user due to a permission bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

  6. Oct 14, 2026 · OSV.dev

    Updated

    In several functions of NotificationManagerService.java and related files, there is a possible way to record audio from the background without notification to the user due to a permission bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

Affected

  • Android platform/frameworks/base11:0 → 11:2021-05-05

Sources

References