CVE-2023-38466

The CVE-2023-38466 entry describes a vulnerability in the ims service of UNISOC chipsets where a missing permission check could allow local information disclosure without requiring additional privileges. The issue is documented across multiple feeds (NVD/Red Hat/CVE/CNNVD) with the same core desc...

CVE-2023-38465

CVE-2023-38465 affects the ims service, with a missing permission check that could lead to local information disclosure. The CVSSv3.1 base score is 5.5 (Privileges Required: Low, Attack Vector: Local, Confidentiality Impact: High, no impact on integrity/availability). Connected sources confirm th...

MediaTek Chip Competitive Conditions Issue Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips that stems from a competitive condition issue with the ims service, which may result in memory corruption...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a possible lack of privilege checking in the ims service...

PT-2023-26454 · Unisoc (Shanghai) Technologies Co. +1 · Sc9832E/Sc9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a possible missing permission check in the ims service. This could lead to local information disclosure with no additional execution...

PT-2023-26453 · Unisoc (Shanghai) Technologies Co. +1 · Sc9832E/Sc9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns a possible missing permission check in the ims service, which could lead to local information disclosure without providing additional execution privileges...

PT-2023-17649 · Unknown · Imsservice

Name of the Vulnerable Software and Affected Versions: No specific software name or version is mentioned in the provided descriptions, except for references to 'ims service'. Therefore, the information about affected versions cannot be determined based on the given data. Description: In the ims...

CVE-2023-33908

In ims service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges...

CVE-2023-33908

In ims service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges...

Information disclosure

In ims service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges...

CVE-2023-33908

In ims service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges...

CVE-2023-33908

CVE-2023-33908 concerns a missing permission check in the ims service, associated with UNISOC chipsets. The vulnerability enables local information disclosure without requiring additional execution privileges. Reported by multiple sources (NVD/Red Hat/CVE entries) consistently describe the impact...

CVE-2023-33908

In ims service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges...

PT-2023-24558 · Unisoc (Shanghai) Technologies Co. +1 · Sc9832E/Sc9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a possible missing permission check in the ims service. This could lead to local information disclosure with no additional execution...

PT-2023-17946 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds read in the Do AIMS SET CALL WAITING function of imsservice.cpp due to a missing bounds check. This could lead to local escalation of privilege, requiring System...

CVE-2022-39884

Improper access control vulnerability in IImsService prior to SMR Nov-2022 Release 1 allows local attacker to access to Call information...

PT-2022-25077 · Unknown · Imsservice

Name of the Vulnerable Software and Affected Versions: IImsService versions prior to SMR Nov-2022 Release 1 Description: The issue is related to improper access control in IImsService, allowing a local attacker to access call information. Recommendations: For versions prior to SMR Nov-2022 Releas...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile devices SMR Nov-2022 Release 1, which stems from an incorrect access control vulnerability in IImsService, which can be...

CVE-2022-25833

Improper authentication in ImsService prior to SMR Apr-2022 Release 1 allows attackers to get IMSI without READPRIVILEGEDPHONESTATE permission...

Samsung SMR 授权问题漏洞

Samsung SMR is a system patch package from South Korea's Samsung Samsung. An authorization issue vulnerability exists in versions prior to Samsung SMR Apr-2022 Release 1, which stems from incorrect authentication in ImsService and can be exploited to obtain IMSI without READPRIVILEGEDPHONESTATE...