PT-2018-12318

Name of the Vulnerable Software and Affected Versions com.android.provider.telephony affected versions not specified Infinix X571 affected versions not specified Lenovo phones such as the A7020 affected versions not specified Description The issue allows SQL injection through the content://wappus...

CVE-2018-14066: Improper Neutralization of Special Elements used in an SQL Command

The content://wappush content provider in com.android.provider.telephony, as found in some custom ROMs for Android phones, allows SQL injection. One consequence is that an application without the READSMS permission can read SMS messages. This affects Infinix X571 phones, as well as various Lenovo...