CVE-2021-1015 in Androidinformazioni

Riassunto

di MITRE • 15/12/2021

In getMeidForSlot of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-186530496

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Prenotare

06/11/2020

Divulgazione

15/12/2021

Moderazione

accettato

CPE

pronto

EPSS

0.00110

KEV

no

Attività

molto basso

Fonti

Do you need the next level of professionalism?

Upgrade your account now!