CVE-2022-38689
published 2022-10-14CVE-2022-38689: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
PriorityP425medium5.5CVSS 3.1
AVLACLPRLUINSUCHINAN
EPSS
0.17%
6.6th percentile
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| unisoc_technologies_co_ltd | sc9863a_sc9832e_sc7731e_t610_t310_t606_t760_t610_t618_t606_t612_t616_t760_t770_t | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Unisoc S8000 Telephony Service information disclosure (EUVD-2022-41258)
vuldb·2026-06-24·CVSS 5.5
CVE-2022-38689 [MEDIUM] Unisoc S8000 Telephony Service information disclosure (EUVD-2022-41258)
A vulnerability classified as problematic was found in Unisoc SC9863A, SC9832E, SC7731E, T610, T310, T606, T760, T610, T618, T606, T612, T616, T760, T770, T820 and S8000. This issue affects some unknown processing of the component Telephony Service. Such manipulation leads to information disclosure.
This vulnerability is documented as CVE-2022-38689. The attack needs to be performed locally. There is not any exploit available.
GHSA
GHSA-q83g-rwc4-phpc: In telephony service, there is a missing permission check
ghsa_unreviewed·2022-10-15
CVE-2022-38689 [MEDIUM] CWE-200 GHSA-q83g-rwc4-phpc: In telephony service, there is a missing permission check
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-10-14
Published