CVE-2020-0107

In getUiccCardsInfo of PhoneInterfaceManager.java, there is a possible permissions bypass due to improper input validation

published July 17, 2020

CVSS
—
EPSS
0%
Percentile
3.6
In the wild
Unconfirmed
What it is

In getUiccCardsInfo of PhoneInterfaceManager.java, there is a possible permissions bypass due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146570216

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00146 · 3.6th percentile
Published
2020-07-17T20:08Z
EPSS history
Timeline
  • 17 JUL 20:08Z
    In getUiccCardsInfo of PhoneInterfaceManager.java, there is a possible permissions bypass due to improper input validation
    cvelistv5