Markus Troßbach

The issue allows attackers to read sensitive information, including the telephone number or e-mail address of a recent contact, via a crafted app. This is related to the Sandbox Profiles component.

The issue allows attackers to bypass a sandbox protection mechanism and access unintended telephone capabilities via a crafted app.