Description
In getLine1NumberForDisplay of PhoneInterfaceManager.java, there is apossible way to determine whether an app is installed, without querypermissions due to a missing permission check. This could lead to localinformation disclosure with no additional execution privileges needed. Userinteraction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-193441322
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2021-6501 | In getLine1NumberForDisplay of PhoneInterfaceManager.java, there is apossible way to determine whether an app is installed, without querypermissions due to a missing permission check. This could lead to localinformation disclosure with no additional execution privileges needed. Userinteraction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-193441322 |
References
History
No history.
Status: PUBLISHED
Assigner: google_android
Published:
Updated: 2024-08-03T15:55:18.526Z
Reserved: 2020-11-06T00:00:00.000Z
Link: CVE-2021-1034
No data.
Status : Modified
Published: 2021-12-15T19:15:14.490
Modified: 2024-11-21T05:43:26.213
Link: CVE-2021-1034
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD