UBUNTU-CVE-2022-41860

In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash...

PT-2022-14552 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android version Android-13 Description: In Telephony, there is a possible disclosure of SIM identifiers due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction...

CVE-2022-33692

Exposure of Sensitive Information in Messaging application prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via log...

CVE-2022-33688

Sensitive information exposure vulnerability in EventType in SecTelephonyProvider prior to SMR Jul-2022 Release 1 allows local attackers with log access permission to get IMSI through device log...

CVE-2022-33692

Exposure of Sensitive Information in Messaging application prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via log...

CVE-2022-33687

Exposure of Sensitive Information in telephony-common.jar prior to SMR Jul-2022 Release 1 allows local attackers to access IMSI via log...

CVE-2022-33696

Exposure of Sensitive Information in Telephony service prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via log...

CVE-2022-33697

Sensitive information exposure vulnerability in ImsServiceSwitchBase in ImsCore prior to SMR Jul-2022 Release 1 allows local attackers with log access permission to get IMSI through device log...

CVE-2022-33688

Sensitive information exposure vulnerability in EventType in SecTelephonyProvider prior to SMR Jul-2022 Release 1 allows local attackers with log access permission to get IMSI through device log...

CVE-2022-33700

Exposure of Sensitive Information in putDsaSimImsi in TelephonyUI prior to SMR Jul-2022 Release 1 allows local attacker to access imsi via log...

CVE-2022-33697

Sensitive information exposure vulnerability in ImsServiceSwitchBase in ImsCore prior to SMR Jul-2022 Release 1 allows local attackers with log access permission to get IMSI through device log...

CVE-2022-33696

Exposure of Sensitive Information in Telephony service prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via log...

CVE-2022-33699

Exposure of Sensitive Information in getDsaSimImsi in TelephonyUI prior to SMR Jul-2022 Release 1 allows local attacker to access imsi via log...

SAMSUNG Mobile devices telephony-common.jar 日志信息泄露漏洞

Samsung telephony-common.jar is a Telephony service for Samsung mobile devices that provides support for the Telephony Application Programming Interface TAPI. A local attacker with log access could exploit the vulnerability to obtain IMSI through device logs...

SAMSUNG Mobile devices TelephonyUI 安全漏洞

Samsung TelephonyUI putDsaSimImsi is a Telephony service for Samsung mobile devices that provides support for the Telephony Application Programming Interface TAPI.An information disclosure vulnerability exists in Samsung TelephonyUI putDsaSimImsi, which stems from putDsaSimImsi in TelephonyUI lac...

SAMSUNG Mobile devices ImsCore 日志信息泄露漏洞

Samsung ImsCore is a configuration of Samsung Samsung mobile devices.An information disclosure vulnerability exists in Samsung ImsCore, which stems from the failure to protect sensitive information in ImsServiceSwitchBase. An attacker could exploit the vulnerability to obtain IMSI via device logs...

SAMSUNG Mobile devices Telephony service 安全漏洞

Samsung Telephony service is a Telephony service for Samsung mobile devices that provides support for the Telephony Application Programming Interface TAPI.An information disclosure vulnerability exists in Samsung Telephony service, which stems from the Telephony service performing messaging to...

SAMSUNG Mobile devices Messaging 安全漏洞

Samsung Message App is a messaging feature for Samsung SAMSUNG mobile devices.Samsung Message App is vulnerable to an information disclosure vulnerability that stems from exposing sensitive information when the application is messaging. An attacker could exploit the vulnerability to access IMSI a...

Samsung mobile 安全漏洞

Samsung mobile is a cell phone from Samsung, South Korea. Samsung mobile low-battery dumpstate log is vulnerable to information disclosure due to a lack of protection of sensitive information in the low-battery dumpstate log. A local attacker could use this vulnerability to obtain SIM card...

Samsung mobile 日志信息泄露漏洞

Samsung Find My Mobile is an application to find a cell phone by the South Korean company Samsung Samsung. An information disclosure vulnerability exists in SimChangeAlertManger, a version prior to Samsung Find My Mobile 7.2.24.12. A local attacker with log access could exploit the vulnerability ...