Lucene search

K
osvGoogleOSV:ASB-A-175213041
HistoryJul 01, 2021 - 12:00 a.m.

Wifi SSID and BSSID leak to preloaded apps without location permission and user consent

2021-07-0100:00:00
Google
osv.dev
19
wifi
ssid
bssid
leak
preloaded apps
location permission
user consent
networkmonitor.java
local information disclosure
system execution privileges
exploitation
software

EPSS

0

Percentile

5.1%

In sendNetworkConditionsBroadcast of NetworkMonitor.java, there is a possible way for a privileged app to receive WiFi BSSID and SSID without location permissions due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

EPSS

0

Percentile

5.1%

Related for OSV:ASB-A-175213041