PT-2021-13410

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a possible leak of Bluetooth MAC addresses due to log information disclosure in several functions of DatabaseManager.java. This could lead to local information disclosure with...

PT-2021-13408

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description In the getConfiguredNetworks method of WifiServiceImpl.java, there is a possible way to determine whether an app is installed without query permissions due to a missing permission check. This could lead ...

PT-2021-13398

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a possible denial of service due to resource exhaustion in the getOffsetBeforeAfter function of TextLine.java. This could lead to a remote denial of service with no additional...

PT-2021-13400

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description In the registerSuggestionConnectionStatusListener function of WifiServiceImpl.java, there is a possible way to determine whether an app is installed without query permissions due to side channel...

PT-2021-13381

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to improper handling of case sensitivity in the isFileUri function of UriUtil.java. This could lead to local information disclosure with no additional execution privileges needed. Us...

PT-2021-13382

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a possible out of bounds read in the toBARK of floor0.c due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges...

PT-2021-13394

Name of the Vulnerable Software and Affected Versions Android version Android-12 Description In the hasManageOngoingCallsPermission function of TelecomServiceImpl.java, there is a possible way to determine whether an app is installed without query permissions due to side channel information...

PT-2021-13395

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description In the getDeviceId function of PhoneSubInfoController.java, there is a possible way to determine whether an app is installed without query permissions due to side channel information disclosure. This cou...

PT-2021-13396

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a possible leak of Bluetooth MAC addresses due to log information disclosure in the OnMetadataChangedListener of AdvancedBluetoothDetailsHeaderController.java. This could lead to...

PT-2021-13397

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a possible way to change the default payment app without user consent due to a tapjack overlay in the onCreate of PaymentDefaultDialog.java. This could lead to local escalation of...

PT-2021-13332

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a possible bypass of user interaction requirements in the onCreate method of AllowBindAppWidgetActivity.java due to unclear UI. This could lead to local escalation of privilege wi...

PT-2021-13438

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a missing permission check in the getLine1NumberForDisplay function of PhoneInterfaceManager.java. This could allow an app to determine whether another app is installed without...

PT-2021-13429

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a possible intent redirection due to a confused deputy in the onEventReceived function of EventResultPersister.java. This could lead to local escalation of privilege, with System...

PT-2021-13434

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description In the setClientStateLocked function of SurfaceFlinger.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution...

PT-2021-13437

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a side channel information disclosure in the PackageManagerService.java file, specifically in the getMimeGroup function. This could allow an attacker to determine whether an app i...

PT-2021-13419

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a side channel information disclosure in the getNetworkTypeForSubscriber function of PhoneInterfaceManager.java. This could allow an app to determine whether another app is...

PT-2021-13420

Name of the Vulnerable Software and Affected Versions Android version Android-12 Description In the getMeidForSlot function of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed without query permissions due to side channel information disclosure. This...

PT-2021-13391 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-12 Description: The issue is related to a logic error in the code of DevicePolicyManagerService.java, specifically in the hasGrantedPolicy function. This error could lead to local information disclosure about the devi...

PT-2021-13389 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-12 Description: In the onNullBinding function of ManagedServices.java, there is a possible permission bypass due to an incorrectly unbound service. This could lead to local escalation of privilege with no additional...

PT-2021-13412

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description A logic error in the code of SubscriptionController.java, specifically in the addSubInfo function, can be exploited to force a factory reset, leading to a local denial of service. This issue requires...