2 matches found
Information disclosure
In requestRouteToHostAddress of ConnectivityService.java, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interactio...
2.1CVSS3.7AI score0.00104EPSS
SaveExploits0References1Affected Software1
CVE-2021-0994: Missing Authorization
In requestRouteToHostAddress of ConnectivityService.java, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interactio...
3.3CVSS5.8AI score0.00104EPSS
SaveExploits0References2
20