Lucene search

K
osvGoogleOSV:ASB-A-178825358
HistoryApr 01, 2021 - 12:00 a.m.

Android Contacts - Granting access to arbitrary content providers leads to expanded access

2021-04-0100:00:00
Google
osv.dev
15
android
contacts
access control
information disclosure
user interaction

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

17.9%

In onActivityResult of QuickContactActivity.java, there is an unnecessary return of an intent. This could lead to local information disclosure of contact data with no additional execution privileges needed. User interaction is needed for exploitation.

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

17.9%

Related for OSV:ASB-A-178825358