Lucene search

App can read iccId of sim card(s) without requiring READ_PRIVILEGED_PHONE_STATE permission.

🗓️ 01 Aug 2021 00:00:00Reported by GoogleType

osv🔗 osv.dev👁 13 Views

App can read ICCID of SIM card(s) without requiring READ_PRIVILEGED_PHONE_STATE permission. Possible disclosure of unique identifiers in getAvailableSubscriptionInfoList of SubscriptionController.java, leading to local information disclosure without additional execution privileges and no user interaction needed for exploitation.

Reporter	Title	Published	Views	Family All 6
CNVD	Google Android SubscriptionController.java information disclosure vulnerability	5 Aug 202100:00	–	cnvd
CVE	CVE-2021-0641	17 Aug 202119:15	–	cve
Prion	Information disclosure	17 Aug 202119:15	–	prion
NVD	CVE-2021-0641	17 Aug 202119:15	–	nvd
Cvelist	CVE-2021-0641	17 Aug 202118:28	–	cvelist
ICS	Siemens SIMATIC	14 Mar 202412:00	–	ics

Source	Link
source	www.source.android.com/security/bulletin/2021-08-01
android	www.android.googlesource.com/platform/frameworks/opt/telephony/+/3987dc05c4cbf727d73c2e847692856df9aee6d2

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Aug 2021 00:00Current

4.8Medium risk

Vulners AI Score4.8

EPSS0.001