CWE Code: 284
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Improper Access Control
Summary: due to the missing permissions on several content providers of the rcs app in its android manifest file will lead to an unprivileged access to phone in snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables in mdm9150, mdm9206, mdm9607, mdm9650, msm8909w, msm8996au, qcs605, qualcomm 215, sd 210/sd 212/sd 205, sd 425, sd 439 / sd 429, sd 450, sd 615/16/sd 415, sd 625, sd 632, sd 636, sd 650/52, sd 712 / sd 710 / sd 670, sd 820, sd 820a, sd 835, sd 845 / sd 850, sd 855, sda660, sdm439, sdm630, sdm660, sdx20
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-05-24
Last Modified Date: 2019-05-29