Samsung SecTelephonyProvider Information Disclosure Vulnerability (CNVD-2022-70741)

Samsung SecTelephonyProvider is a Telephony service for Samsung mobile devices that provides support for the Telephony Application Programming Interface (TAPI).An information disclosure vulnerability exists in Samsung SecTelephonyProvider, which stems from a lack of protection for EventType in SecTelephonyProvider lacks protection for sensitive information, and a local attacker with log access could exploit the vulnerability to obtain IMSI through device logs.