Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The content://wappush content provider in com.android.provider.telephony, as found in some custom ROMs for Android phones, allows SQL injection. One consequence is that an application without the READ_SMS permission can read SMS messages. This affects Infinix X571 phones, as well as various Lenovo phones (such as the A7020) that have since been fixed by Lenovo.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
drozer SQL注入漏洞
Vulnerability Description
drozer是一个 Android 安全评估框架。 drozer for Android 6.0版本（Infinix X571）和7.0版本（Lenovo A7020）中的custom ROMs的com.android.provider.telephony包的content://wappush content provider存在SQL注入漏洞。攻击者可利用该漏洞读取SMS消息。
CVSS Information
N/A
Vulnerability Type
N/A