CVE-2022-38688 — Sensitive Information Exposure in Technologies CO LTD Sc9863a Sc9832e Sc7731e T610 T310 T606 T760 T610 T618 T606 T612 T616 T760 T770 T

CWE-200 — Sensitive Information ExposureCWE-862 — Missing Authorization2 documents2 sources
Severity
5.5MEDIUMNVD
EPSS
0.1%
top 79.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Unisoc Technologies CO LTD Sc9863a Sc9832e Sc7731e T610 T310 T606 T760 T610 T618 T606 T612 T616 T760 T770 TGoogle Android
Timeline
PublishedOct 14
Latest updateOct 15

Description

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶NVDgoogle/android10.0, 11.0, 12.0+2

🔴Vulnerability Details

1
GHSA
GHSA-q36q-v436-3mgq: In telephony service, there is a missing permission check↗2022-10-15
▶