PT-2022-17560

Name of the Vulnerable Software and Affected Versions ImsService versions prior to SMR Apr-2022 Release 1 Description The issue is related to improper authentication in ImsService, allowing attackers to obtain the IMSI without the necessary READ PRIVILEGED PHONE STATE permission. Recommendations...

CVE-2022-22272

Improper authorization in TelephonyManager prior to SMR Jan-2022 Release 1 allows attackers to get IMSI without READPRIVILEGEDPHONESTATE permission...

Samsung SMR 安全漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A security vulnerability exists in Samsung SMR that originates from improper authorization in TelephonyManager and allows an attacker to gain access to IMSI without the...