CVE-2019-2197

In processPhonebookAccess of CachedBluetoothDevice.java, there is a possible permission bypass due to an insecure default value. This could lead to local information disclosure of the user's contact list with no additional execution privileges needed. User interaction is needed for...

PT-2019-16286

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 10 Description The issue is related to a possible permission bypass in the processPhonebookAccess function of CachedBluetoothDevice.java due to an insecure default value. This could lead to local information...

CVE-2019-2197: Initialization of a Resource with an Insecure Default

In processPhonebookAccess of CachedBluetoothDevice.java, there is a possible permission bypass due to an insecure default value. This could lead to local information disclosure of the user's contact list with no additional execution privileges needed. User interaction is needed for...