CVE-2023-38298

Various software builds for the following TCL devices 30Z, A3X, 20XE, 10L leak the device IMEI to a system property that can be accessed by any local app on the device without any permissions or special privileges. Google restricted third-party apps from directly obtaining non-resettable device...

CVE-2023-38299

Specific software builds for the AT&T Calypso , Nokia C100 , Nokia C200 , and BLU View 3 devices are vulnerable to an information leak. A high-privilege process incorrectly exposes the device IMEI to a system property named persist.sys.imei1, which can be accessed by any local application without...