CVE-2021-0597: Missing Authorization

In notifyProfileAdded and notifyProfileRemoved of SipService.java, there is a possible way to retrieve SIP account names due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

PT-2021-3869

Name of the Vulnerable Software and Affected Versions Android versions Android-8.1 through Android-11 Description The issue is related to a missing permission check in the notifyProfileAdded and notifyProfileRemoved functions of SipService.java. This could lead to local information disclosure,...