CVE-2021-39635

2022-02-1117:40:46

google_android

www.cve.org

ims

unisoc

volte

android soc

permissions

vulnerability

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

35.4%

JSON

ims_ex is a vendor system service used to manage VoLTE in unisoc devices，But it does not verify the caller’s permissions，so that normal apps (No phone permissions) can obtain some VoLTE sensitive information and manage VoLTE calls.Product: AndroidVersions: Android SoCAndroid ID: A-206492634

CNA Affected

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android SoC"
      }
    ]
  }
]

References

source.android.com/security/bulletin/2022-02-01