72 matches found
Improper access control
An improper access control vulnerability in TelephonyUI prior to SMR MAY-2021 Release 1 allows local attackers to write arbitrary files of telephony process via untrusted applications...
CVE-2021-25397
CVE-2021-25397 concerns an improper access control in Samsung TelephonyUI prior to SMR MAY-2021 Release 1. The issue allows a local attacker, via untrusted applications, to write arbitrary files within the telephony process. Documented impact across sources indicates local privilege escalation po...
CVE-2021-25397
An improper access control vulnerability in TelephonyUI prior to SMR MAY-2021 Release 1 allows local attackers to write arbitrary files of telephony process via untrusted applications...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability previously existed in SAMSUNG Mobile devices SMR MAY-2021 Release 1, which stemmed from an improper access control vulnerabili...
CVE-2021-25397: Improper Export of Android Application Components
An improper access control vulnerability in TelephonyUI prior to SMR MAY-2021 Release 1 allows local attackers to write arbitrary files of telephony process via untrusted applications...
CVE-2013-6835
TelephonyUI Framework in Apple iOS 7 before 7.1, when Safari is used, does not require user confirmation for FaceTime audio calls, which allows remote attackers to obtain telephone number or e-mail address information via a facetime-audio: URL...
Design/Logic Flaw
TelephonyUI Framework in Apple iOS 7 before 7.1, when Safari is used, does not require user confirmation for FaceTime audio calls, which allows remote attackers to obtain telephone number or e-mail address information via a facetime-audio: URL...
CVE-2013-6835
TelephonyUI Framework in Apple iOS 7 before 7.1, when Safari is used, does not require user confirmation for FaceTime audio calls, which allows remote attackers to obtain telephone number or e-mail address information via a facetime-audio: URL...
CVE-2013-6835
CVE-2013-6835 involves Apple iOS prior to 7.1 where, when Safari is used, Facetime-Audio calls could be initiated via a facetime-audio URL without user confirmation, potentially exposing the user’s phone number or email address. The vulnerability arises from lack of user interaction prompting bef...
CVE-2013-6835: Undefined Security Weakness
TelephonyUI Framework in Apple iOS 7 before 7.1, when Safari is used, does not require user confirmation for FaceTime audio calls, which allows remote attackers to obtain telephone number or e-mail address information via a facetime-audio: URL...
