CVEvulnerability

CVE-2021-39635

9.1 CRITICAL Published 2022-02-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-02-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 2.0 ([email protected])
9.4 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:N
Weaknesses
CWE-276

Description

ims_ex is a vendor system service used to manage VoLTE in unisoc devices，But it does not verify the caller's permissions，so that normal apps (No phone permissions) can obtain some VoLTE sensitive information and manage VoLTE calls.Product: AndroidVersions: Android SoCAndroid ID: A-206492634

Affected configurations

• google android

Related

Weakness · CWE (1)

  • CWE-276 Incorrect Default Permissions weakness

References