Local Information Disclosure Vulnerability in Messaging by Unisoc
CVE-2023-40648

5.5MEDIUM

Key Information:

Vendor

Unisoc
Status
Sc9863a
Vendor
CVE Published:
8 October 2023

What is CVE-2023-40648?

A potential vulnerability exists in the Messaging application developed by Unisoc due to a missing permission check. This flaw could allow unauthorized local information disclosure without the necessity for additional execution privileges. Attackers could exploit this weakness to gain unauthorized access to sensitive user data, raising concerns about data security and privacy within affected systems.

Affected Version(s)

SC9863A Android11/Android12

References

https://www.unisoc.com/en_us/secy/announcementDetail/http...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.