3 matches found
Information disclosure
In requestRouteToHostAddress of ConnectivityService.java, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interactio...
PT-2021-13399
Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a missing permission check in the requestRouteToHostAddress function of ConnectivityService.java. This could allow an attacker to determine whether an app is installed without que...
CVE-2021-0994: Missing Authorization
In requestRouteToHostAddress of ConnectivityService.java, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interactio...