Back to search
CVE-2016-0831
Published: Mar 12, 2016
Modified: Aug 5, 2024
PUBLISHED
Description
The getDeviceIdForPhone function in internal/telephony/PhoneSubInfoController.java in Telephony in Android 5.x before 5.1.1 LMY49H and 6.x before 2016-03-01 does not check for the READ_PHONE_STATE permission, which allows attackers to obtain sensitive information via a crafted application, aka internal bug 25778215.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
http://source.android.com/security/bulletin/2016-03-01.html
x_refsource_CONFIRM
84266
vdb-entry
x_refsource_BID
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now