EUVD-2019-11839

Malware in sbrugna...

CVE-2019-2197

In processPhonebookAccess of CachedBluetoothDevice.java, there is a possible permission bypass due to an insecure default value. This could lead to local information disclosure of the user's contact list with no additional execution privileges needed. User interaction is needed for...

CVE-2019-2197

In processPhonebookAccess of CachedBluetoothDevice.java, there is a possible permission bypass due to an insecure default value. This could lead to local information disclosure of the user's contact list with no additional execution privileges needed. User interaction is needed for...

CVE-2019-2197

CVE-2019-2197 affects Android platforms (8.0–10) via an issue in CachedBluetoothDevice.java:processPhonebookAccess where an insecure default value permits a permission bypass, enabling local disclosure of the user’s contact list. Exploitation requires local access with low attack complexity and i...