Authentication flaw

In archiveStoredConversation of MmsService.java, there is a possible way to archive message conversation without user consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

PT-2021-13186

Name of the Vulnerable Software and Affected Versions: Android version Android-11 Description: In the archiveStoredConversation function of MmsService.java, there is a possible way to archive message conversations without user consent due to a missing permission check. This could lead to local...

CVE-2021-0539: Missing Authorization

In archiveStoredConversation of MmsService.java, there is a possible way to archive message conversation without user consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

Google Android security vulnerabilities

Google Android is a Linux-based open source operating system from the Google Open Handheld Consortium Google. An elevation of privilege vulnerability exists in Google Android MmsService.java. The vulnerability stems from a lack of permission checking in archiveStoredConversation in MmsService.jav...