Android Audio Policy Service Uninitialized Data Information Disclosure Vulnerability

A vulnerability allowing information disclosure has been identified in the Android Audio Policy Service. This issue arises from uninitialized data in the 'onTransact' method of 'IAudioPolicyService.cpp', which could lead to local information leakage. The vulnerability exists in various Android versions, including 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, and 8.1.

Impact

Exploitation of this vulnerability could result in unauthorized local information disclosure.

Remediation

Users can update their devices to the June 2018 security patch level to address this vulnerability.