Design/Logic Flaw

2023-11-0708:15:00

PRIOn knowledge base

www.prio-n.com

android

implicit intent

sensitive communication

vulnerability

versions 12.7.20.12

13.5.28

unauthorized access

location data

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

30.0%

JSON

Use of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13.1.48, 13.5.28 in Android 12, and 14.7.38 in Android 13 allows attackers to access location data.

CPENameOperatorVersion
phonelt12.7.20.12
phonelt13.1.48
phonege13.5.0
phonelt13.5.28
phonelt14.7.38

Name	Operator	Version
phone	lt	12.7.20.12
phone	lt	13.1.48
phone	ge	13.5.0
phone	lt	13.5.28
phone	lt	14.7.38

References

security.samsungmobile.com/serviceWeb.smsb?year=2023&month=11