Information Disclosure Vulnerability in Messaging by Unisoc
CVE-2023-40647

5.5MEDIUM

Key Information:

Vendor
Unisoc
Status
Sc9863a
Vendor
CVE Published:
8 October 2023

Summary

A vulnerability in Messaging related to a missing permission check could potentially allow unauthorized local information disclosure. This issue does not require additional execution privileges, thus posing a risk to sensitive data access. It is crucial for users and organizations using this application to evaluate their security parameters and implement necessary updates to mitigate potential threats.

Affected Version(s)

SC9863A Android11/Android12

References

https://www.unisoc.com/en_us/secy/announcementDetail/http...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.