Local Information Disclosure Vulnerability in Messaging by Unisoc

CVE-2023-40641

What is CVE-2023-40641?

A vulnerability has been identified in the Messaging system developed by Unisoc that allows for local information disclosure. The flaw arises from a missing permission check, which could potentially allow unauthorized access to sensitive data without requiring any additional execution privileges. This situation raises serious security concerns as attackers might exploit this weakness to gain unwarranted access to private information.

References