CVE-2021-0644: Exposure of Sensitive Information to an Unauthorized Actor

In conditionallyRemoveIdentifiers of SubscriptionController.java, there is a possible way to retrieve a trackable identifier due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for...

PT-2021-13280

Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-11 Description The issue is related to a missing permission check in the conditionallyRemoveIdentifiers method of SubscriptionController.java. This could lead to local information disclosure with Use...