CVE-2020-0448

In getPhoneAccountsForPackage of TelecomServiceImpl.java, there is a possible way to access a tracking identifier due to a missing permission check. This could lead to local information disclosure of the identifier, which could be used to track an account across devices, with no additional...

PT-2020-11790

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 11 Description In the getPhoneAccountsForPackage function of TelecomServiceImpl.java, there is a possible way to access a tracking identifier due to a missing permission check. This could lead to local information...