Executive Summary

This vulnerability exists in the Contacts Provider component where there is a missing permission check that allows access to an incoming call's phone number and related metadata.

Because of this missing permission check, an attacker can locally disclose this information without needing any additional execution privileges or user interaction.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to local information disclosure, meaning that sensitive data such as incoming call phone numbers and associated metadata could be accessed without proper authorization.

Since no additional privileges or user interaction are required, this could allow unauthorized parties to obtain private call information, potentially compromising user privacy.

Useful 0 Not Useful 0