The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the getDeviceIdForPhone function in the Android operating system’s internal/telephony/PhoneSubInfoController.java file is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain confidentia...

Android Telephony Information Disclosure Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA.Telephony is one of the components that provides telephony functionality. The internal/telephony/PhoneSubInfoController.java file in Telephony in versions 5.x prior to Android 5.1.1 LMY49H...

CVE-2016-0831: Exposure of Sensitive Information to an Unauthorized Actor

The getDeviceIdForPhone function in internal/telephony/PhoneSubInfoController.java in Telephony in Android 5.x before 5.1.1 LMY49H and 6.x before 2016-03-01 does not check for the READPHONESTATE permission, which allows attackers to obtain sensitive information via a crafted application, aka...