Lucene search
GoogleOSV:ASB-A-159062405HistoryOct 01, 2020 - 12:00 a.m.
Missing validation of package name in EuiccController#getEid
2020-10-0100:00:00
Google
osv.dev
11
euicccontroller
geteid
uiccaccessrule
missing validation
local information disclosure
eid data
no user interaction
software
EPSS
0
Percentile
5.1%
In getCarrierPrivilegeStatus of UiccAccessRule.java, there is a missing permission check. This could lead to local information disclosure of EID data with no additional execution privileges needed. User interaction is not needed for exploitation.
Related
prion
prion
Information disclosure
2020-10-14 14:15:00
nvd
nvd
CVE-2020-0246
2020-10-14 14:15:15
cvelist
cvelist
CVE-2020-0246
2020-10-14 13:06:52
cve
cve
CVE-2020-0246
2020-10-14 14:15:15
threatpost
threatpost
Google Rolls Out Fixes for High-Severity Android System Flaws
2020-10-07 18:44:59