Missing Permission Check in Messaging Products by Unisoc
CVE-2023-40643

5.5MEDIUM

Key Information:

Vendor
Unisoc
Status
Sc9863a
Vendor
CVE Published:
8 October 2023

Summary

In the Messaging product from Unisoc, a flaw has been identified where a missing permission check can result in local information disclosure. This vulnerability does not require additional execution privileges, which means that it could potentially expose sensitive information to unauthorized users. Protecting against this issue is crucial to maintaining the integrity and confidentiality of data handled by the application.

Affected Version(s)

SC9863A Android11/Android12

References

https://www.unisoc.com/en_us/secy/announcementDetail/http...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.