Information disclosure

In onWnmFrameReceived of PasspointManager.java, there is a missing permission check. This could lead to local information disclosure of location data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10...

CVE-2020-0378

CVE-2020-0378 affects Android System (PasspointManager.java: onWnmFrameReceived) with a missing permission check that could lead to local information disclosure of location data. Underlying cause is an insufficient permission check in a code path handling Passpoint/WLAN Frame processing. Document...