Published: 2016/07/22  Last Updated: 2016/07/25

Information from KDDI CORPORATION

Vulnerability ID:JVN#06212291
Title:Android OS Contacts app fails to restrict access permissions
Status:Vulnerable, investigating

This is a statement from the vendor itself with no modification by JPCERT/CC.

Affected products are as shown below. Please apply software update when available.

[Fix available through OS update]
GALAXY SⅢ Progre SCL21
AQUOS PHONE SERIE SHL21
ARROWS ef FJL21
Xperia VL SOL21
VEGA PTL21
AQUOS PAD SHT21

[Fix unavailable - now under study for fixing]
INFOBAR A02
HTC J butterfly HTL21
G'zOne TYPE-L CAL21
DIGNO S KYL21
Optimus G LGL21
ARROWS Z ISW13F
AQUOS PHONE CL IS17SH
AQUOS PHONE SL IS15SH
AQUOS PHONE SERIE ISW16SH
URBANO PROGRESSO
HTC J ISW13HT
Xperia acro HD IS12S
MOTOROLA RAZR IS12M
GALAXY SII WiMAX ISW11SC
Optimus X IS11LG
ARROWS Z ISW11F
HTC EVO 3D ISW12HT
Smart TV Stick