CVE-2024-20065

A missing permission check in telephony allows for local information disclosure on devices using MediaTek components. This vulnerability requires no additional execution privileges and no user interaction for exploitation. The issue is addressed in the June 2024 security patch level (specifically...