3 matches found
EUVD-2022-25611
Malicious code in bioql PyPI...
5.5CVSS5.7AI score0.0013EPSS
SaveExploits0References1
Sql injection
In queryInternal of CallLogProvider.java, there is a possible access to voicemail information due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...
1.7CVSS5.5AI score0.0013EPSS
SaveExploits0References1Affected Software1
CVE-2022-20351
In queryInternal of CallLogProvider.java, there is a possible access to voicemail information due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...
5.8AI score0.0013EPSS
SaveExploits0References1
20