SAMSUNG Mobile devices Telephony service 安全漏洞

Samsung Telephony service is a Telephony service for Samsung mobile devices that provides support for the Telephony Application Programming Interface TAPI.An information disclosure vulnerability exists in Samsung Telephony service, which stems from the Telephony service performing messaging to...

SAMSUNG Mobile devices 安全漏洞

Samsung TelephonyUI getDsaSimImsi is a Telephony service from Samsung Samsung Mobile that provides support for the Telephony Application Programming Interface TAPI.An information disclosure vulnerability exists in Samsung TelephonyUI getDsaSimImsi, which stems from getDsaSimImsi in TelephonyUI...

SAMSUNG Mobile devices telephony-common.jar 日志信息泄露漏洞

Samsung telephony-common.jar is a Telephony service for Samsung mobile devices that provides support for the Telephony Application Programming Interface TAPI. A local attacker with log access could exploit the vulnerability to obtain IMSI through device logs...

CVE-2022-33696

Exposure of Sensitive Information in Telephony service prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via log...

CVE-2022-33696

The vulnerability CVE-2022-33696 affects Samsung Telephony service on Samsung mobile devices. It permits a local attacker to access sensitive mobile identifiers (IMSI and ICCID) through logs due to an information-disclosure flaw in the Telephony service, prior to the SMR July 2022 Release 1. Impa...

CVE-2022-33687

Exposure of Sensitive Information in telephony-common.jar prior to the Samsung SMR July‑2022 Release 1 allows a local attacker with log access to obtain IMSI from device logs. The issue stems from information disclosure in telephony-common.jar on Samsung mobile devices. Affected component: teleph...

CVE-2022-33687

Exposure of Sensitive Information in telephony-common.jar prior to SMR Jul-2022 Release 1 allows local attackers to access IMSI via log...

PT-2022-21812

Name of the Vulnerable Software and Affected Versions Telephony service versions prior to SMR Jul-2022 Release 1 Description The issue allows a local attacker to access sensitive information, including imsi and iccid, via log exposure. Recommendations For versions prior to SMR Jul-2022 Release 1,...

PT-2022-21802

Name of the Vulnerable Software and Affected Versions telephony-common.jar versions prior to SMR Jul-2022 Release 1 Description The issue allows local attackers to access sensitive information, specifically the IMSI, via log exposure in the telephony-common.jar. This could potentially compromise...

CVE-2022-33696: Exposure of Sensitive Information Due to Incompatible Policies

Exposure of Sensitive Information in Telephony service prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via log...

CVE-2022-33687: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information in telephony-common.jar prior to SMR Jul-2022 Release 1 allows local attackers to access IMSI via log...

The vulnerability of the SDK client integration component of the Oracle Advanced Outbound Telephony component of the Oracle E-Business Suite allows a malicious actor to gain access to read, modify, add, or delete data.

The vulnerability of the SDK client integration component of the Oracle Advanced Outbound Telephony component of the Oracle E-Business Suite exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read,...

The vulnerability of the Region Mapping sub-component of the Oracle Advanced Outbound Telephony component of the Oracle E-Business Suite allows a malicious actor to gain access to read, modify, add, or delete data.

The vulnerability of the User Interface sub-component of the Oracle Advanced Outbound Telephony component in the Oracle E-Business Suite exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to read, modify, add, ...

CVE-2021-35079

Improper validation of permissions for third party application accessing Telephony service API can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-35079

Improper validation of permissions for third party application accessing Telephony service API can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

Input validation

Improper validation of permissions for third party application accessing Telephony service API can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-35079

Improper validation of permissions for third party application accessing Telephony service API can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-35079

CVE-2021-35079 describes improper validation of permissions for a third-party app attempting to access the Telephony service API, leading to information disclosure on Qualcomm/Snapdragon platforms (Compute, Connectivity, IoT variants). The underlying issue is privilege/permission validation for t...

PT-2022-10400

Name of the Vulnerable Software and Affected Versions Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Consumer IOT affected versions not specified Snapdragon Industrial IOT affected versions not specified Snapdragon Mobile...

CVE-2021-35079: Improper Preservation of Permissions

Improper validation of permissions for third party application accessing Telephony service API can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...