Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6rmr-m77c-mfqc

Опубликовано: 27 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 3.6

Описание

The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as call states, durations, called numbers, contacts info, etc.

The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as call states, durations, called numbers, contacts info, etc.

EPSS

Процентиль: 14%
0.00046
Низкий

3.6 Low

CVSS3

Дефекты

CWE-925

Связанные уязвимости

CVSS3: 3.6
nvd
больше 2 лет назад

The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as call states, durations, called numbers, contacts info, etc.

EPSS

Процентиль: 14%
0.00046
Низкий

3.6 Low

CVSS3

Дефекты

CWE-925