Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get Cell Location Information through log of user device.
The product logs too much information, making log files hard to process and possibly hindering recovery efforts or forensic analysis after an attack.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Android | 10.0 (including) | 10.0 (including) | |
Android | 11.0 (including) | 11.0 (including) | |
Android | 12.0 (including) | 12.0 (including) |