platform/packages/providers/ContactsProvider vulnerabilities (Android)
9 vulnerabilities.
-
platform/packages/providers/ContactsProviderAndroid In tokenize of SQLiteTokenizer.java, there is a possible way to access voicemail information due to SQL injection. This could lead to local escalation of privilege with no additional execution privile… No score -
platform/packages/providers/ContactsProviderAndroid In applySimpleFieldMaxSize of DataRowHandler.java, there is a possible way to insert a large... 5.5 Medium -
platform/packages/providers/ContactsProviderAndroid In multiple functions, there is a possible way to access the contacts database due to a SQL... 7.8 High -
platform/packages/providers/ContactsProviderAndroid In openFile of CallLogProvider.java, there is a possible permission bypass due to a path... 6.7 Medium -
platform/packages/providers/ContactsProviderAndroid In queryInternal of CallLogProvider.java, there is a possible access to voicemail information due... 5.5 Medium -
platform/packages/providers/ContactsProviderAndroid In openFile of CallLogProvider.java, there is a possible permission bypass due to a path... 7.8 High -
platform/packages/providers/ContactsProviderAndroid In onStart of ContactsDumpActivity.java, there is possible access to contacts due to a tapjacking... 5.0 Medium -
platform/packages/providers/ContactsProviderAndroid In getSimSerialNumber of TelephonyManager.java, there is a possible way to read a trackable... 5.5 Medium -
platform/packages/providers/ContactsProviderAndroid In queryInternal of CallLogProvider.java, there is a possible permission bypass due to improper... 3.3 Low