CVE-2023-40636

In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with System execution privileges needed...

CVE-2023-40637

In telecom service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges...

CVE-2023-40637

In telecom service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges...

CVE-2023-40633

In phasecheckserver, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-40633

CVE-2023-40633 describes a vulnerability in the phasecheckserver where a missing permission check could allow local information disclosure without requiring additional execution privileges. Supported by multiple sources (NVD entry, CVE records, and related enrichments), the flaw is characterized ...

CVE-2023-40631

No public technical details are provided in the supplied documents for CVE-2023-40631 beyond the description of a missing permission check in Dialer causing local information disclosure; monitor for updates.

PT-2023-27562 · Messaging · Messaging

Name of the Vulnerable Software and Affected Versions: Messaging affected versions not specified Description: The issue is related to a possible missing permission check in Messaging. This could lead to local information disclosure with no additional execution privileges needed. Recommendations: ...

PT-2023-27563 · Messaging · Messaging

Name of the Vulnerable Software and Affected Versions: Messaging affected versions not specified Description: The issue is related to a possible missing permission check in Messaging. This could lead to local information disclosure with no additional execution privileges needed. Recommendations: ...

PT-2023-27572 · Unknown · Telecom Service

Name of the Vulnerable Software and Affected Versions: Telecom service affected versions not specified Description: The issue is related to a possible missing permission check in the Telecom service. This could lead to local information disclosure with no additional execution privileges needed...

PT-2023-27566 · Messaging · Messaging

Name of the Vulnerable Software and Affected Versions: Messaging affected versions not specified Description: The issue is related to a possible missing permission check in Messaging. This could lead to local information disclosure with no additional execution privileges needed. Recommendations: ...

PT-2023-27561 · Unknown · Soundrecorder

Name of the Vulnerable Software and Affected Versions: SoundRecorder affected versions not specified Description: The issue is related to a possible missing permission check in the SoundRecorder service. This could lead to local information disclosure with no additional execution privileges...

PT-2023-27568 · Messaging · Messaging

Name of the Vulnerable Software and Affected Versions: Messaging affected versions not specified Description: The issue is related to a possible missing permission check in Messaging. This could lead to local information disclosure with no additional execution privileges needed. Recommendations: ...

CVE-2023-21291

In visitUris of Notification.java, there is a possible way to reveal image contents from another user due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21291

In visitUris of Notification.java, there is a possible way to reveal image contents from another user due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21291

In visitUris of Notification.java, there is a possible way to reveal image contents from another user due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21291

In visitUris of Notification.java, there is a possible way to reveal image contents from another user due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21291

In visitUris of Notification.java, there is a possible way to reveal image contents from another user due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation...

PT-2023-8313 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a component called IntentResolver in the Android operating system, which has inadequate access control. This could lead to local information disclosure without needi...

Information disclosure

In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07993705; Issue ID: ALPS08014138...

CVE-2023-32819

CVE-2023-32819 affects MediaTek components (display path) with a missing bounds check, causing information disclosure that could lead to local escalation of privileges (System level) without user interaction. The issue is documented under patch ALPS07993705 and is referenced across multiple feeds...