Local telephony data disclosure via permissionless events

Information disclosure in OpenHarmony 3.1.2 and earlier allows local users to read mobile numbers and SMS data through public events. The telephony component in the communication subsystem publishes personal-data events without assigning a permission requirement, so malicious applications can register listeners. No account or user interaction is required, but attacker-controlled code must already run as an application on the affected device; the reported impact is limited to disclosure.