Lucene search

K
osvGoogleOSV:ASB-A-213457638
HistoryJul 01, 2022 - 12:00 a.m.

Possible Security Report - App can read group uuid of sim card(s) without requiring READ_PRIVILEGED_PHONE_STATE permission.

2022-07-0100:00:00
Google
osv.dev
5

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

In getSubscriptionProperty of SubscriptionController.java, there is a possible read of a sensitive identifier due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for OSV:ASB-A-213457638