Android Information Disclosure

The vulnerability of the getDeviceIdForPhone function in the Android operating system’s internal/telephony/PhoneSubInfoController.java file is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain confidentia...

PT-2015-2212

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48I Description The issue is related to insufficient access control in the SIM Toolkit component of the Android operating system. This can be exploited by a remote attacker using a specially crafted applicati...

CVE-2015-3858

The checkDestination function in internal/telephony/SMSDispatcher.java in Android before 5.1.1 LMY48M relies on an obsolete permission name for an authorization check, which allows attackers to bypass an intended user-confirmation requirement for SMS short-code messaging via a crafted application...