155 matches found
CVE-2022-33688
Sensitive information exposure vulnerability in EventType in SecTelephonyProvider prior to SMR Jul-2022 Release 1 allows local attackers with log access permission to get IMSI through device log...
CVE-2022-33687
Exposure of Sensitive Information in telephony-common.jar prior to SMR Jul-2022 Release 1 allows local attackers to access IMSI via log...
CVE-2022-33687
Exposure of Sensitive Information in telephony-common.jar prior to the Samsung SMR July‑2022 Release 1 allows a local attacker with log access to obtain IMSI from device logs. The issue stems from information disclosure in telephony-common.jar on Samsung mobile devices. Affected component: teleph...
PT-2022-21812
Name of the Vulnerable Software and Affected Versions Telephony service versions prior to SMR Jul-2022 Release 1 Description The issue allows a local attacker to access sensitive information, including imsi and iccid, via log exposure. Recommendations For versions prior to SMR Jul-2022 Release 1,...
PT-2022-21803
Name of the Vulnerable Software and Affected Versions SecTelephonyProvider versions prior to SMR Jul-2022 Release 1 Description The issue allows local attackers with log access permission to expose sensitive information, specifically IMSI, through device logs. This is due to a sensitive informati...
PT-2022-21808
Name of the Vulnerable Software and Affected Versions Messaging application versions prior to SMR Jul-2022 Release 1 Description The issue allows a local attacker to access sensitive information, including imsi and iccid, via log exposure. Recommendations For versions prior to SMR Jul-2022 Releas...
CVE-2022-33697: Insertion of Sensitive Information into Log File
Sensitive information exposure vulnerability in ImsServiceSwitchBase in ImsCore prior to SMR Jul-2022 Release 1 allows local attackers with log access permission to get IMSI through device log...
CVE-2022-33699: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information in getDsaSimImsi in TelephonyUI prior to SMR Jul-2022 Release 1 allows local attacker to access imsi via log...
CVE-2022-33688: Insertion of Sensitive Information into Log File
Sensitive information exposure vulnerability in EventType in SecTelephonyProvider prior to SMR Jul-2022 Release 1 allows local attackers with log access permission to get IMSI through device log...
CVE-2022-33687: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information in telephony-common.jar prior to SMR Jul-2022 Release 1 allows local attackers to access IMSI via log...
PT-2022-21816
Name of the Vulnerable Software and Affected Versions TelephonyUI versions prior to SMR Jul-2022 Release 1 Description The issue allows a local attacker to access sensitive information, specifically the imsi, via log exposure in the putDsaSimImsi function. Recommendations For versions prior to SM...
PT-2022-21802
Name of the Vulnerable Software and Affected Versions telephony-common.jar versions prior to SMR Jul-2022 Release 1 Description The issue allows local attackers to access sensitive information, specifically the IMSI, via log exposure in the telephony-common.jar. This could potentially compromise...
PT-2022-21815
Name of the Vulnerable Software and Affected Versions TelephonyUI versions prior to SMR Jul-2022 Release 1 Description The issue allows a local attacker to access sensitive information, specifically the imsi, via log exposure in the getDsaSimImsi function. Recommendations For versions prior to SM...
CVE-2022-33692: Exposure of Sensitive Information Due to Incompatible Policies
Exposure of Sensitive Information in Messaging application prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via log...
CVE-2022-33696: Exposure of Sensitive Information Due to Incompatible Policies
Exposure of Sensitive Information in Telephony service prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via log...
CVE-2022-33700: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information in putDsaSimImsi in TelephonyUI prior to SMR Jul-2022 Release 1 allows local attacker to access imsi via log...
PT-2022-21813
Name of the Vulnerable Software and Affected Versions ImsCore versions prior to SMR Jul-2022 Release 1 Description The issue allows local attackers with log access permission to expose sensitive information, specifically the IMSI, through device logs. Recommendations For versions prior to SMR...
Samsung SMR Licensing Issue Vulnerability (CNVD-2022-63637)
Samsung SMR is a system patch package from South Korea's Samsung Samsung. An authorization issue vulnerability exists in versions prior to Samsung SMR Apr-2022 Release 1, which stems from incorrect authentication in ImsService and can be exploited to obtain IMSI without READPRIVILEGEDPHONESTATE...
