CVE-2021-0686

In getDefaultSmsPackage of RoleManagerService.java, there is a possible way to get information about the default sms app of a different device user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction i...

CVE-2021-0686: Missing Authorization

In getDefaultSmsPackage of RoleManagerService.java, there is a possible way to get information about the default sms app of a different device user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction i...

PT-2021-13318

Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-11 Description In the getDefaultSmsPackage method of RoleManagerService.java, a missing permission check allows for the potential disclosure of information about the default SMS app of a different...