CVE-2023-21121

In onResume of AppManagementFragment.java, there is a possible way to prevent users from forgetting a previously connected VPN due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2023-21121

In onResume of AppManagementFragment.java, there is a possible way to prevent users from forgetting a previously connected VPN due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

PT-2023-17913 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-12 Description: The issue is related to improper input validation in the onResume of AppManagementFragment.java. This could lead to local escalation of privilege with no additional execution...

CVE-2021-39706

In onResume of CredentialStorage.java, there is a possible way to cleanup content of credentials storage due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

PT-2022-10987

Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-12 Description The issue is related to a missing permission check in the onResume method of CredentialStorage.java. This could allow for the cleanup of credentials storage content, potentially leadin...

CVE-2021-1012

In onResume of NotificationAccessDetails.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction ...

PT-2021-13417

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a side channel information disclosure in the onResume method of NotificationAccessDetails.java. This could allow an attacker to determine whether an app is installed without...

CVE-2021-0642

In onResume of VoicemailSettingsFragment.java, there is a possible way to retrieve a trackable identifier without permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for...

Design/Logic Flaw

In onResume of VoicemailSettingsFragment.java, there is a possible way to retrieve a trackable identifier without permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for...

PT-2021-13278

Name of the Vulnerable Software and Affected Versions Android versions Android-8.1 through Android-11 Description In the onResume method of VoicemailSettingsFragment.java, there is a possible way to retrieve a trackable identifier without permissions due to a missing permission check. This could...