CVE-2022-38474

2022-12-2200:00:00

ubuntu.com

firefox

android

audio recording

permission prompt

vulnerability

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

0.001 Low

EPSS

Percentile

30.7%

JSON

A website that had permission to access the microphone could record audio
without the audio notification being shown. This bug does not allow the
attacker to bypass the permission prompt - it only affects the notification
shown once permission has been granted.<br />This bug only affects Firefox
for Android. Other operating systems are unaffected.. This vulnerability
affects Firefox < 104.