Bouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information via a crafted application, aka internal bug 24106146. Rated low severity (CVSS 3.3), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Google
Information Disclosure
Android
NVD
CVSS 3.0
3.3
EPSS
0.2%
Bluetooth in Android 6.0 before 2016-01-01 allows remote attackers to obtain sensitive Contacts information by leveraging pairing, aka internal bug 23607427. Rated low severity (CVSS 3.1), this vulnerability is no authentication required. No vendor patch available.
Google
Information Disclosure
Android
NVD
CVSS 3.0
3.1
EPSS
0.1%