Lucene search

K
osvGoogleOSV:ASB-A-154124307
HistorySep 01, 2020 - 12:00 a.m.

[PendingIntent in EmergencyCallbackModeService could be Hijacked to Access Telephony Protected Provider]

2020-09-0100:00:00
Google
osv.dev
6

AI Score

5.2

Confidence

High

EPSS

0

Percentile

5.1%

In showNotification of EmergencyCallbackModeService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.

AI Score

5.2

Confidence

High

EPSS

0

Percentile

5.1%

Related for OSV:ASB-A-154124307