Lucene search
PRIOn knowledge basePRION:CVE-2023-21082HistoryApr 19, 2023 - 8:15 p.m.
Information disclosure
2023-04-1920:15:00
PRIOn knowledge base
www.prio-n.com
2
newoutgoingcallintentbroadcaster
enumerate
contactphonenumber
confuseddeputy
android-11
android-12l
android-13
a-257030107
nvd
In getNumberFromCallIntent of NewOutgoingCallIntentBroadcaster.java, there is a possible way to enumerate other user’s contact phone number due to a confused deputy. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-257030107
Related
nvd
nvd
CVE-2023-21082
2023-04-19 20:15:11
cve
cve
CVE-2023-21082
2023-04-19 20:15:11
cnvd
cnvd
Google Android Information Disclosure Vulnerability (CNVD-2023-55373)
2023-04-23 00:00:00
osv
osv
cvelist
cvelist
CVE-2023-21082
2023-04-19 00:00:00