Lucene search
GoogleOSV:ASB-A-153993591HistorySep 01, 2020 - 12:00 a.m.
[PendingIntent in LimitedSimFunctionWarningNotification Could be Hijacked to Access Telephony Protected Provider]
2020-09-0100:00:00
Google
osv.dev
11
EPSS
0
Percentile
5.1%
In showLimitedSimFunctionWarningNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.
References
android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7
android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2
android.googlesource.com/platform/packages/services/Telephony/+/4e6a25843d7ef14301eb8cb5985c84d54785fbc4
source.android.com/security/bulletin/2020-09-01
Related
cve
cve
CVE-2020-0399
2020-09-17 16:15:13
cvelist
cvelist
CVE-2020-0399
2020-09-17 15:42:55
prion
prion
Design/Logic Flaw
2020-09-17 16:15:00
nvd
nvd
CVE-2020-0399
2020-09-17 16:15:13
threatpost
threatpost
Google Squashes Critical Android Media Framework Bug
2020-09-09 20:32:55