In getUiccCardsInfo of PhoneInterfaceManager.java, there is a possible permissions bypass due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"vanir_signatures": [
{
"digest": {
"length": 1250.0,
"function_hash": "282247050853886927661644562995071886487"
},
"id": "ASB-A-146570216-30fffcb2",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/services/Telephony/+/cfdfe3a8e0ff3f9951970ca69b56953f6bf49ec1",
"target": {
"function": "getUiccCardsInfo",
"file": "src/com/android/phone/PhoneInterfaceManager.java"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"147705246636539422186093702643043524398",
"218123468486775241797468860568931243045",
"129794691999755027352314405719688506920",
"333151599442303064878109228955520719590",
"174557698360124160255288897300806203142",
"260322260685462169610669922699657814441",
"15538175855698570613001502948847365502",
"199024497072963109695544719059755219908",
"165384662254772312855617191245102747608",
"244961761973097641330393803928694758104",
"62678776504216212853333177000832049714",
"3083732489358817134180021112223621043"
]
},
"id": "ASB-A-146570216-60a78cfe",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/services/Telephony/+/cfdfe3a8e0ff3f9951970ca69b56953f6bf49ec1",
"target": {
"file": "src/com/android/phone/PhoneInterfaceManager.java"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"221375207955341759902199117380429189516",
"106649973103535324564621408866090464181",
"151175765067590648549996870719811162311",
"276933235064011154335688098305305784816",
"233128433710020461150006817204337907010",
"107976542135175226372749205243651810317",
"75376424105227009162486300443704960861",
"34898323044074346273798073747538602657",
"209368303427016114300912381316039534389",
"21019001891683175789991174419280227468",
"101842111658314252386280447631467274656",
"256028672275384485438594425391457292927"
]
},
"id": "ASB-A-146570216-725aee8e",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/services/Telephony/+/a39e6c1efb02ff9c19fb91beae9b548f5c1ecc78",
"target": {
"file": "src/com/android/phone/PhoneInterfaceManager.java"
}
},
{
"digest": {
"length": 949.0,
"function_hash": "157262642188820754289544886774625995983"
},
"id": "ASB-A-146570216-dba92233",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/services/Telephony/+/a39e6c1efb02ff9c19fb91beae9b548f5c1ecc78",
"target": {
"function": "getUiccCardsInfo",
"file": "src/com/android/phone/PhoneInterfaceManager.java"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/services/Telephony/+/a39e6c1efb02ff9c19fb91beae9b548f5c1ecc78",
"https://android.googlesource.com/platform/packages/services/Telephony/+/cfdfe3a8e0ff3f9951970ca69b56953f6bf49ec1"
],
"types": [
"ID"
],
"spl": "2020-07-01",
"severity": "High"
}