CVE-2023-42678

In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-42678

creationtimestamp| type| source ---|---|--- 2023-12-22 13:21:52+00:00| seen| https://t.me/ctinow/158372...

CVE-2023-42678

CVE-2023-42678 affects the imsservice in UNISOC chipsets. The root cause is a missing permission check that allows writing permission usage records for an app, enabling local information disclosure without additional execution privileges. The NVD entry (CVSS v3.1: LOCAL attack vector, LOW complex...