Information disclosure of StatusBarNotification.getKey() without additional permission

2021-05-0100:00:00

Google

osv.dev

information disclosure

statusbarnotification.getkey()

snoozehelper.java

user interaction

local

no additional permission

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

17.9%

JSON

In createPendingIntent of SnoozeHelper.java, there is a possible broadcast intent containing a sensitive identifier. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.