CVE-2020-0246: Missing Authorization

In getCarrierPrivilegeStatus of UiccAccessRule.java, there is a missing permission check. This could lead to local information disclosure of EID data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...

PT-2020-11601

Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-11 Description A missing permission check in the getCarrierPrivilegeStatus function of UiccAccessRule.java could lead to local information disclosure of EID data. No additional execution privileges a...