PT-2021-13432

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to improper casting in the setTransactionState of SurfaceFlinger, which could lead to arbitrary code execution in a privileged process. This may result in local escalation of privile...

PT-2021-13408

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description In the getConfiguredNetworks method of WifiServiceImpl.java, there is a possible way to determine whether an app is installed without query permissions due to a missing permission check. This could lead ...

PT-2021-13396

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a possible leak of Bluetooth MAC addresses due to log information disclosure in the OnMetadataChangedListener of AdvancedBluetoothDetailsHeaderController.java. This could lead to...

PT-2021-13410

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a possible leak of Bluetooth MAC addresses due to log information disclosure in several functions of DatabaseManager.java. This could lead to local information disclosure with...

PT-2021-13428

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a side channel information disclosure in the onCreate method of RequestIgnoreBatteryOptimizations.java. This could allow an attacker to determine whether an app is installed witho...

PT-2021-13412

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description A logic error in the code of SubscriptionController.java, specifically in the addSubInfo function, can be exploited to force a factory reset, leading to a local denial of service. This issue requires...

PT-2021-13395

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description In the getDeviceId function of PhoneSubInfoController.java, there is a possible way to determine whether an app is installed without query permissions due to side channel information disclosure. This cou...

PT-2021-13429

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a possible intent redirection due to a confused deputy in the onEventReceived function of EventResultPersister.java. This could lead to local escalation of privilege, with System...

PT-2021-13381

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to improper handling of case sensitivity in the isFileUri function of UriUtil.java. This could lead to local information disclosure with no additional execution privileges needed. Us...

PT-2021-13420

Name of the Vulnerable Software and Affected Versions Android version Android-12 Description In the getMeidForSlot function of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed without query permissions due to side channel information disclosure. This...

PT-2021-13424

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a permission confusion in the snoozeNotification function of NotificationListenerService.java. This confusion is caused by a misleading user consent dialog, which could lead to...

PT-2021-13437

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a side channel information disclosure in the PackageManagerService.java file, specifically in the getMimeGroup function. This could allow an attacker to determine whether an app i...

PT-2021-13389 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-12 Description: In the onNullBinding function of ManagedServices.java, there is a possible permission bypass due to an incorrectly unbound service. This could lead to local escalation of privilege with no additional...

PT-2021-13402

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a possible APN disclosure due to log information disclosure in the handleUpdateNetworkState function of GnssNetworkConnectivityHandler.java. This could lead to local information...

PT-2021-13438

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a missing permission check in the getLine1NumberForDisplay function of PhoneInterfaceManager.java. This could allow an app to determine whether another app is installed without...

PT-2021-13332

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a possible bypass of user interaction requirements in the onCreate method of AllowBindAppWidgetActivity.java due to unclear UI. This could lead to local escalation of privilege wi...

PT-2021-13417

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a side channel information disclosure in the onResume method of NotificationAccessDetails.java. This could allow an attacker to determine whether an app is installed without...

PT-2021-13407

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a confused deputy in the adjustStreamVolume method of AudioService.java, allowing an unprivileged app to change the audio stream volume. This could lead to local escalation of...

PT-2021-13419

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a side channel information disclosure in the getNetworkTypeForSubscriber function of PhoneInterfaceManager.java. This could allow an app to determine whether another app is...

PT-2021-13397

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a possible way to change the default payment app without user consent due to a tapjack overlay in the onCreate of PaymentDefaultDialog.java. This could lead to local escalation of...