CVE-2022-45118 — Telephony in communication subsystem sends public events with personal data, but the permission is not set.
OpenHarmony-v3.1.2 and prior versions had a vulnerability that telephony in communication subsystem sends public events with personal data, but the permission is not set. Malici…
Published: 2022-12-08 · CVSS: 6.2 · CVSS 3.1
OpenHarmony-v3.1.2 and prior versions had a vulnerability that telephony in communication subsystem sends public events with personal data, but the permission is not set. Malicious apps could listen to public events and obtain information such as mobile numbers and SMS data without permissions.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7