CVE-2021-0428: Missing Authorization

In getSimSerialNumber of TelephonyManager.java, there is a possible way to read a trackable identifier due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions...

PT-2021-13105

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 Description: The issue is related to a missing permission check in the getSimSerialNumber function of TelephonyManager.java. This could lead to local information disclosure with User execution privileges needed. Us...