Local Information Disclosure in Messaging by Unisoc Products
CVE-2023-40644

5.5MEDIUM

Key Information:

Vendor
Unisoc
Status
Sc9863a
Vendor
CVE Published:
8 October 2023

Summary

In Unisoc Messaging products, a potential vulnerability exists due to a missing permission check. This flaw could allow unauthorized access to sensitive local information without requiring additional execution privileges. Organizations relying on Unisoc Messaging should assess their risk exposure and consider appropriate risk mitigation measures.

Affected Version(s)

SC9863A Android11/Android12

References

https://www.unisoc.com/en_us/secy/announcementDetail/http...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.