PT-2021-13394

Name of the Vulnerable Software and Affected Versions Android version Android-12 Description In the hasManageOngoingCallsPermission function of TelecomServiceImpl.java, there is a possible way to determine whether an app is installed without query permissions due to side channel information...

PT-2021-13408

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description In the getConfiguredNetworks method of WifiServiceImpl.java, there is a possible way to determine whether an app is installed without query permissions due to a missing permission check. This could lead ...

PT-2021-13398

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a possible denial of service due to resource exhaustion in the getOffsetBeforeAfter function of TextLine.java. This could lead to a remote denial of service with no additional...

PT-2021-13437

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a side channel information disclosure in the PackageManagerService.java file, specifically in the getMimeGroup function. This could allow an attacker to determine whether an app i...

PT-2021-13332

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a possible bypass of user interaction requirements in the onCreate method of AllowBindAppWidgetActivity.java due to unclear UI. This could lead to local escalation of privilege wi...

PT-2021-13429

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a possible intent redirection due to a confused deputy in the onEventReceived function of EventResultPersister.java. This could lead to local escalation of privilege, with System...

PT-2021-13381

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to improper handling of case sensitivity in the isFileUri function of UriUtil.java. This could lead to local information disclosure with no additional execution privileges needed. Us...

CVE-2021-0991: Insertion of Sensitive Information into Log File

In OnMetadataChangedListener of AdvancedBluetoothDetailsHeaderController.java, there is a possible leak of Bluetooth MAC addresses due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for...

PT-2021-13428

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a side channel information disclosure in the onCreate method of RequestIgnoreBatteryOptimizations.java. This could allow an attacker to determine whether an app is installed witho...

PT-2021-13410

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a possible leak of Bluetooth MAC addresses due to log information disclosure in several functions of DatabaseManager.java. This could lead to local information disclosure with...

PT-2021-13397

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a possible way to change the default payment app without user consent due to a tapjack overlay in the onCreate of PaymentDefaultDialog.java. This could lead to local escalation of...

PT-2021-13400

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description In the registerSuggestionConnectionStatusListener function of WifiServiceImpl.java, there is a possible way to determine whether an app is installed without query permissions due to side channel...

PT-2021-13382

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a possible out of bounds read in the toBARK of floor0.c due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges...

PT-2021-13438

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a missing permission check in the getLine1NumberForDisplay function of PhoneInterfaceManager.java. This could allow an app to determine whether another app is installed without...

PT-2021-13419

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a side channel information disclosure in the getNetworkTypeForSubscriber function of PhoneInterfaceManager.java. This could allow an app to determine whether another app is...

PT-2021-13420

Name of the Vulnerable Software and Affected Versions Android version Android-12 Description In the getMeidForSlot function of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed without query permissions due to side channel information disclosure. This...

PT-2021-13391 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-12 Description: The issue is related to a logic error in the code of DevicePolicyManagerService.java, specifically in the hasGrantedPolicy function. This error could lead to local information disclosure about the devi...

PT-2021-13389 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-12 Description: In the onNullBinding function of ManagedServices.java, there is a possible permission bypass due to an incorrectly unbound service. This could lead to local escalation of privilege with no additional...

PT-2021-13412

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description A logic error in the code of SubscriptionController.java, specifically in the addSubInfo function, can be exploited to force a factory reset, leading to a local denial of service. This issue requires...

CVE-2021-0953: Improper Preservation of Permissions

In setOnClickActivityIntent of SearchWidgetProvider.java, there is a possible way to access contacts and history bookmarks without permission due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for...