CVE-2021-39779

CVE-2021-39779 affects Android 12L via Telecom Service.getCallStateUsingPackage, where there is a missing permission check that could allow local information disclosure of the call state without extra execution privileges. The issue is described across sources (CVE entry and CNVD-2022-44589) as a...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability that originates from a missing permission check in Telecom Service's getCallStateUsingPackage. An attacker could use this vulnerability to obtain...

CVE-2021-0989

In hasManageOngoingCallsPermission of TelecomServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed...

Information disclosure

In hasManageOngoingCallsPermission of TelecomServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2020-0448

In getPhoneAccountsForPackage of TelecomServiceImpl.java, there is a possible way to access a tracking identifier due to a missing permission check. This could lead to local information disclosure of the identifier, which could be used to track an account across devices, with no additional...

Dear Jailbreaker, Apple Wants to Have a Word with You

After banning the word “jailbreak” from its app store and music library, Apple today reversed course and again permits the term – slang for hacking into a device to download unauthorized content — to appear on iTunes and its App Store. On Thursday bloggers noticed Apple had censored the word, usi...