| commit | 2d83c4451f903f9c3693699547866be063a469ef | [log] [tgz] |
|---|---|---|
| author | Pranav Madapurmath <pmadapurmath@google.com> | Tue Jun 11 22:50:08 2024 -0700 |
| committer | hmtheboy154 <buingoc67@gmail.com> | Sat Feb 15 01:11:29 2025 -0500 |
| tree | 0dab4d715f0f47c524616b61ee9a40aef08b508b | |
| parent | f26758416063d843f66c6404fb4b21399b700c07 [diff] |
Resolve cross-user image exploit for conference status hints Ensure that status hint image icon is validated for cross-user exploits. Currently, there is no check for this so a conference call can display an image from another user, exposing a vulnerability. Bug: 329058967 Test: Manual with POC (cherry picked from https://googleplex-android-review.googlesource.com/q/commit:a8e2bf9c77cd94f683979c849015b78ef0537802) Merged-In: Ib9d701398d25d021cdb9abacbaa5b175f62bee1d Change-Id: Ib9d701398d25d021cdb9abacbaa5b175f62bee1d