Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get Cell Location Information through log of user device.
Weakness
The product logs too much information, making log files hard to process and possibly hindering recovery efforts or forensic analysis after an attack.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Android | 10.0 (including) | 10.0 (including) | |
| Android | 11.0 (including) | 11.0 (including) | |
| Android | 12.0 (including) | 12.0 (including) |