CyberRota Analysis
AI-GeneratedA vulnerability exists in the WalletContextualLocationsService.kt, where a missing permission check allows unauthorized access to wallet information. This could result in local information disclosure without requiring any additional execution privileges or user interaction. Developers and security teams managing applications that utilize this service should prioritize addressing this issue to protect sensitive user data.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In isCallerAllowed of WalletContextualLocationsService.kt, there is a possible way to get wallet information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.