In Contacts Provider, there is a possible way to access an incoming call's phone number and associated metadata due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
In Contacts Provider, there is a possible way to access an incoming call's phone number and associated metadata due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Why this VPI (explainable, experimental)
VPI breakdown
| Impact | 33.00 |
| Exploitation signal(No additional exploitation signal) | ×1.00 |
| VPI | 33.00 |
VPI formula vpi-v1