Lucene search
GoogleOSV:ASB-A-157748906HistoryOct 01, 2020 - 12:00 a.m.
Connected Wi-Fi AP BSSID broadcast without requiring location permissions by PasspointManager
2020-10-0100:00:00
Google
osv.dev
11
passpointmanager
wi-fi
bssid
permission check
information disclosure
location data
exploitation
software
EPSS
0
Percentile
5.1%
In onWnmFrameReceived of PasspointManager.java, there is a missing permission check. This could lead to local information disclosure of location data with User execution privileges needed. User interaction is not needed for exploitation.
Related
prion
prion
Information disclosure
2020-10-14 14:15:00
cve
cve
CVE-2020-0378
2020-10-14 14:15:16
nvd
nvd
CVE-2020-0378
2020-10-14 14:15:16
cvelist
cvelist
CVE-2020-0378
2020-10-14 13:05:45
threatpost
threatpost
Google Rolls Out Fixes for High-Severity Android System Flaws
2020-10-07 18:44:59