CVE-2021-39777: Exposure of Resource to Wrong Sphere

In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2021-39770: Incorrect Default Permissions

In Framework, there is a possible disclosure of the device owner package due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid...

PT-2022-11048

Name of the Vulnerable Software and Affected Versions Android versions Android-12L Description In Framework, there is a possible disclosure of the device owner package due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

PT-2022-11020

Name of the Vulnerable Software and Affected Versions Android versions Android-12L Description In Voicemail, there is a possible way to retrieve a trackable identifier due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2021-39769: Incorrect Default Permissions

In Device Policy, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product...

CVE-2021-39783: Improper Privilege Management

In rcsservice, there is a possible way to modify TTY mode due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-19796059...

PT-2022-11061

Name of the Vulnerable Software and Affected Versions Android versions Android-12L Description The issue is related to a missing permission check in the rcsservice, allowing modification of TTY mode. This could lead to local escalation of privilege without needing additional execution privileges...

PT-2022-11060

Name of the Vulnerable Software and Affected Versions Android versions Android-12L Description In Telephony, there is a possible unauthorized modification of the PLMN SIM file due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileg...

PT-2022-11066

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue concerns a possible leak of TTY mode change due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed...

PT-2022-11029

Name of the Vulnerable Software and Affected Versions Android versions Android-12L Description The issue is related to a missing permission check in the Settings, allowing the reading of Bluetooth device names without proper permissions. This could lead to local information disclosure with no...

PT-2022-11058

Name of the Vulnerable Software and Affected Versions Android versions Android-12L Description The issue is related to a missing permission check in Traceur, which could allow bypassing developer settings requirements for capturing system traces. This could lead to local escalation of privilege...

PT-2022-14250 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-12L Description: The issue is related to a missing permission check in incfs, allowing for the mounting of arbitrary paths. This could lead to local escalation of privilege, with System execution privileges required f...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability that originates from a missing permission check in Telecom Service's getCallStateUsingPackage. An attacker could use this vulnerability to obtain...

CVE-2021-39784: Improper Privilege Management

In CellBroadcastReceiver, there is a possible path to enable specific cellular features due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-39782: Improper Privilege Management

In Telephony, there is a possible unauthorized modification of the PLMN SIM file due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-39743: Missing Authorization

In PackageManager, there is a possible way to update the last usage time of another package due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-39751: Missing Authorization

In Settings, there is a possible way to read Bluetooth device names without proper permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

CVE-2021-39749: Missing Authorization

In WindowManager, there is a possible way to start non-exported and protected activities due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-20002: Missing Authorization

In incfs, there is a possible way of mounting on arbitrary paths due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-19865765...

PT-2022-11062

Name of the Vulnerable Software and Affected Versions Android versions Android-12L Description In CellBroadcastReceiver, there is a possible path to enable specific cellular features due to a missing permission check. This could lead to local escalation of privilege with no additional execution...