GHSA-h56x-6fp7-752g
GitHub Security Advisory
⚠ Unreviewed
MODERATE
Has CVE
Advisory Details
In getDefaultSmsPackage of RoleManagerService.java, there is a possible way to get information about the default sms app of a different device user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-177927831
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: June 15, 2025 6:20 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.