CVE-2021-0642

Name of the Vulnerable Software and Affected Versions Android versions Android-8.1 through Android-11

Description In the onResume method of VoicemailSettingsFragment.java, there is a possible way to retrieve a trackable identifier without permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.

Recommendations For Android versions Android-8.1 through Android-11, consider restricting access to the VoicemailSettingsFragment.java until a patch is available. As a temporary workaround, avoid using the onResume method in VoicemailSettingsFragment.java to minimize the risk of exploitation.