CVE-2021-0597

In notifyProfileAdded and notifyProfileRemoved of SipService.java, there is a possible way to retrieve SIP account names due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

CVE-2021-0597

CVE-2021-0597 describes an information-disclosure issue in Android where SipService.java’s notifyProfileAdded/notifyProfileRemoved can expose SIP account names due to a missing permission check. The vulnerability enables local information disclosure without extra execution privileges, and exploit...