CVE-2022-38697
published 2022-10-14CVE-2022-38697: In messaging service, there is a missing permission check. This could lead to access unexpected provider in contacts service with no additional execution…
PriorityP425medium5.5CVSS 3.1
AVLACLPRLUINSUCHINAN
EPSS
0.13%
3.0th percentile
In messaging service, there is a missing permission check. This could lead to access unexpected provider in contacts service with no additional execution privileges needed.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| unisoc_technologies_co_ltd | sc9863a_sc9832e_sc7731e_t610_t310_t606_t760_t610_t618_t606_t612_t616_t760_t770_t | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Unisoc S8000 Messaging Service permission (EUVD-2022-41266)
vuldb·2026-06-24·CVSS 5.5
CVE-2022-38697 [MEDIUM] Unisoc S8000 Messaging Service permission (EUVD-2022-41266)
A vulnerability has been found in Unisoc SC9863A, SC9832E, SC7731E, T610, T310, T606, T760, T610, T618, T606, T612, T616, T760, T770, T820 and S8000 and classified as critical. Impacted is an unknown function of the component Messaging Service. The manipulation leads to permission issues.
This vulnerability is documented as CVE-2022-38697. The attack needs to be performed locally. There is not any exploit available.
GHSA
GHSA-pqgf-fq7r-x6mq: In messaging service, there is a missing permission check
ghsa_unreviewed·2022-10-15
CVE-2022-38697 [MEDIUM] CWE-862 GHSA-pqgf-fq7r-x6mq: In messaging service, there is a missing permission check
In messaging service, there is a missing permission check. This could lead to access unexpected provider in contacts service with no additional execution privileges needed.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-10-14
Published