In getCallStateUsingPackage of Telecom Service, there is a missing permission check. This could lead to local information disclosure of the call state with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-190400974
During installation, installed file permissions are set to allow anyone to modify those files.
Link | Tags |
---|---|
https://source.android.com/security/bulletin/android-12l | vendor advisory |