CVE-2023-21394

The CVE relates to TelecomServiceImpl.java (registerPhoneAccount) on Android. A missing permission check could allow an attacker to disclose images from another user via local access, with no extra execution privileges or user interaction required. The issue is described consistently across multi...