Missing Permission Check in Telephony Service by Unisoc
CVE-2023-30866
5.5MEDIUM
Key Information:
- Vendor
- CVE Published:
- 6 June 2023
What is CVE-2023-30866?
In the telephony service developed by Unisoc, a critical oversight exists due to a missing permission check, which may enable unauthorized local information disclosure. This vulnerability allows an attacker to potentially gain access to sensitive information without the need for additional execution privileges, thereby posing a significant risk to the integrity of user data.
Affected Version(s)
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Android10