Local Privilege Escalation Vulnerability in Telecom Service by Unisoc

CVE-2023-42740

Summary

A vulnerability has been identified in the telecom service provided by Unisoc, where the absence of a necessary permission check allows for the unauthorized alteration of permission usage records by applications. This flaw creates an opportunity for local privilege escalation, thus enabling an attacker to increase their permissions without requiring any additional execution privileges, potentially compromising system security.

References