Google Android vulnerabilities

CVE-2021-1031 [LOW] CWE-203 CVE-2021-1031: In cancelNotificationsFromListener of NotificationManagerService.java, there is a possible way to de In cancelNotificationsFromListener of NotificationManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Prod

CVE-2021-0989 [LOW] CWE-203 CVE-2021-0989: In hasManageOngoingCallsPermission of TelecomServiceImpl.java, there is a possible way to determine In hasManageOngoingCallsPermission of TelecomServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: Andr

CVE-2021-0983 [LOW] CWE-200 CVE-2021-0983: In createAdminSupportIntent of DevicePolicyManagerService.java, there is a possible disclosure of in In createAdminSupportIntent of DevicePolicyManagerService.java, there is a possible disclosure of information about installed device/profile owner package name due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:

CVE-2021-0988 [LOW] CWE-203 CVE-2021-0988: In getLaunchedFromUid and getLaunchedFromPackage of ActivityClientController.java, there is a possib In getLaunchedFromUid and getLaunchedFromPackage of ActivityClientController.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for explo

CVE-2021-1032 [LOW] CWE-203 CVE-2021-1032: In getMimeGroup of PackageManagerService.java, there is a possible way to determine whether an app i In getMimeGroup of PackageManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: An

CVE-2021-0990 [LOW] CWE-203 CVE-2021-0990: In getDeviceId of PhoneSubInfoController.java, there is a possible way to determine whether an app i In getDeviceId of PhoneSubInfoController.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: An

CVE-2021-0987 [LOW] CWE-203 CVE-2021-0987: In getNeighboringCellInfo of PhoneInterfaceManager.java, there is a possible way to determine whethe In getNeighboringCellInfo of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVe

CVE-2021-1018 [LOW] CWE-203 CVE-2021-1018: In adjustStreamVolume of AudioService.java, there is a possible way to determine whether an app is i In adjustStreamVolume of AudioService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Andro

CVE-2021-1015 [LOW] CWE-203 CVE-2021-1015: In getMeidForSlot of PhoneInterfaceManager.java, there is a possible way to determine whether an app In getMeidForSlot of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:

CVE-2021-0978 [LOW] CWE-862 CVE-2021-0978: In getSerialForPackage of DeviceIdentifiersPolicyService.java, there is a possible way to determine In getSerialForPackage of DeviceIdentifiersPolicyService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: Andr

CVE-2022-22267 [LOW] CWE-285 CVE-2022-22267: Implicit Intent hijacking vulnerability in ActivityMetricsLogger prior to SMR Jan-2022 Release 1 all Implicit Intent hijacking vulnerability in ActivityMetricsLogger prior to SMR Jan-2022 Release 1 allows attackers to get running application information.

CVE-2022-20320 [LOW] CWE-203 CVE-2022-20320: In ActivityManager, there is a possible way to determine whether an app is installed, without query In ActivityManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-1879

CVE-2022-20318 [LOW] CWE-203 CVE-2022-20318: In PackageInstaller, there is a possible way to determine whether an app is installed, without query In PackageInstaller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-19

CVE-2022-20307 [LOW] CWE-203 CVE-2022-20307: In AlarmManagerService, there is a possible way to determine whether an app is installed, without qu In AlarmManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A

CVE-2022-20309 [LOW] CWE-203 CVE-2022-20309: In PackageInstaller, there is a possible way to determine whether an app is installed, without query In PackageInstaller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-19

CVE-2022-20316 [LOW] CWE-203 CVE-2022-20316: In ContentResolver, there is a possible way to determine whether an app is installed, without query In ContentResolver, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-1907

CVE-2022-20252 [LOW] CWE-203 CVE-2022-20252: In PackageManager, there is a possible way to determine whether an app is installed, without query p In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-2245

CVE-2022-20251 [LOW] CWE-203 CVE-2022-20251: In LocaleManager, there is a possible way to determine whether an app is installed, without query pe In LocaleManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-22588

CVE-2022-20249 [LOW] CWE-203 CVE-2022-20249: In LocaleManager, there is a possible way to determine whether an app is installed, without query pe In LocaleManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-22690

CVE-2011-3975 [LOW] CWE-200 CVE-2011-3975: A certain HTC update for Android 2.3.4 build GRJ22, when the Sense interface is used on the HTC EVO A certain HTC update for Android 2.3.4 build GRJ22, when the Sense interface is used on the HTC EVO 3D, EVO 4G, ThunderBolt, and unspecified other devices, provides the HtcLoggers.apk application, which allows user-assisted remote attackers to obtain a list of telephone numbers from a log, and other sensitive information, by leveraging the android.permiss