2 matches found
CVE-2021-0642: Missing Authorization
In onResume of VoicemailSettingsFragment.java, there is a possible way to retrieve a trackable identifier without permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for...
5.5CVSS5.8AI score0.00327EPSS
SaveExploits0References3
Google Android VoicemailSettingsFragment.java information disclosure vulnerability
Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA. Google Android VoicemailSettingsFragment.java is vulnerable to information disclosure. An attacker could exploit this vulnerability to obtain sensitive information...
5.5CVSS1.7AI score0.00327EPSS
SaveExploits0References1
20