Android Information Disclosure

The vulnerability of the getDeviceIdForPhone function in the Android operating system’s internal/telephony/PhoneSubInfoController.java file is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain confidentia...

Android Telephony Information Disclosure Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA.Telephony is one of the components that provides telephony functionality. The internal/telephony/PhoneSubInfoController.java file in Telephony in versions 5.x prior to Android 5.1.1 LMY49H...

CVE-2016-0831

The getDeviceIdForPhone function in internal/telephony/PhoneSubInfoController.java in Telephony in Android 5.x before 5.1.1 LMY49H and 6.x before 2016-03-01 does not check for the READPHONESTATE permission, which allows attackers to obtain sensitive information via a crafted application, aka...

CVE-2016-0831: Exposure of Sensitive Information to an Unauthorized Actor

The getDeviceIdForPhone function in internal/telephony/PhoneSubInfoController.java in Telephony in Android 5.x before 5.1.1 LMY49H and 6.x before 2016-03-01 does not check for the READPHONESTATE permission, which allows attackers to obtain sensitive information via a crafted application, aka...

PT-2016-1577

Name of the Vulnerable Software and Affected Versions Android versions 5.x through 5.1.1 LMY49H Android versions 6.x through 2016-03-01 Description The issue is related to the getDeviceIdForPhone function in internal/telephony/PhoneSubInfoController.java, which lacks protection of service data...