Lucene search

K
osvGoogleOSV:ASB-A-154323381
HistoryOct 01, 2020 - 12:00 a.m.

[PendingIntent in Voicemail Notification could be Hijacked to Access Telephony Protected Provider]

2020-10-0100:00:00
Google
osv.dev
13
voicemail
notificationmgr
permission bypass
information disclosure
user execution privileges

EPSS

0

Percentile

5.1%

In updateMwi of NotificationMgr.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.

EPSS

0

Percentile

5.1%

Related for OSV:ASB-A-154323381