CVE-2009-2348

CVE-2009-2348 describes a vulnerability in Android 1.5 CRBxx where local users can bypass camera and audio recording permission settings. An attacker could install and execute an application that accesses the camera or microphone without explicit user permission. This vulnerability has a CVSS score of 6.9, indicating high impact on confidentiality, integrity, and availability, with a local attack vector and medium complexity. There is no evidence of active exploitation, publicly available exploit code in common frameworks like Metasploit or ExploitDB, nor significant community discussion or media coverage surrounding this CVE.