A vulnerability, which was classified as critical, was found in Google Android 14. Affected is the function setMediaButtonReceiver of the file MediaSessionRecord.java. The manipulation leads to improper access controls.

This vulnerability is traded as CVE-2023-40111. Local access is required to approach this attack. There is no exploit available.

It is recommended to apply a patch to fix this issue.