CVE-2023-40636

CVE-2023-40636 relates to a vulnerability in the telecom service where a missing permission check could allow writing permission usage records for an app, enabling local information disclosure. The underlying issue requires System-level execution privileges for exploitation, with a CVSSv3.1 base ...

CVE-2023-40636

In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with System execution privileges needed...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. UNISOC Chipsets has a security vulnerability that stems from a lack of privilege checking in telecom. An attacker could exploit the vulnerability to cause information leakage...

CVE-2023-40637: Missing Authorization

In telecom service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of privilege checking in Telecom. An attacker could exploit the vulnerability to cause information leakage...

CVE-2023-40636: Missing Authorization

In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with System execution privileges needed...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. UNISOC Chipsets has a security vulnerability that stems from a lack of privilege checking in telecom. An attacker could exploit the vulnerability to cause information leakage...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of privilege checking in Telecom. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2023-40638: Missing Authorization

In Telecom service, there is a possible missing permission check. This could lead to local denial of service with System execution privileges needed...

CVE-2023-40650: Missing Authorization

In Telecom service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

PT-2023-27558

Name of the Vulnerable Software and Affected Versions Telecom service affected versions not specified Description The issue is related to a possible missing permission check in the telecom service, which could lead to local information disclosure without providing additional execution privileges...

PT-2023-27572 · Unknown · Telecom Service

Name of the Vulnerable Software and Affected Versions: Telecom service affected versions not specified Description: The issue is related to a possible missing permission check in the Telecom service. This could lead to local information disclosure with no additional execution privileges needed...

PT-2023-27557

Name of the Vulnerable Software and Affected Versions Telecom service affected versions not specified Description The issue is related to a missing permission check in the telecom service, which could allow writing permission usage records of an app. This might lead to local information disclosur...

PT-2023-27559 · Unknown · Telecom Service

Name of the Vulnerable Software and Affected Versions: Telecom service affected versions not specified Description: The issue is related to a possible missing permission check in the Telecom service, which could lead to local denial of service. System execution privileges are needed to exploit th...

CVE-2023-44126

The CVE-2023-44126 issue concerns the Android Call management component (com.android.server.telecom) patched by LG. The vulnerability arises because LG’s patch sends a large number of LG-owned implicit broadcasts that disclose sensitive telephony data to all third-party apps on the same device. T...

Mysterious 'Sandman' Threat Actor Targets Telecom Providers Across Three Continents

A previously undocumented threat actor dubbed Sandman has been attributed to a set of cyber attacks targeting telecommunication providers in the Middle East, Western Europe, and the South Asian subcontinent. Notably, the intrusions leverage a just-in-time JIT compiler for the Lua programming...

China Accuses U.S. of Decade-Long Cyber Espionage Campaign Against Huawei Servers

China's Ministry of State Security MSS has accused the U.S. of breaking into Huawei's servers, stealing critical data, and implanting backdoors since 2009, amid mounting geopolitical tensions between the two countries. In a message posted on WeChat, the government authority said U.S. intelligence...

New ShroudedSnooper actor targets telecommunications firms in the Middle East with novel Implants

Cisco Talos recently discovered a new malware family were calling "HTTPSnoop" being deployed against telecommunications providers in the Middle East. HTTPSnoop is a simple, yet effective, backdoor that consists of novel techniques to interface with Windows HTTP kernel drivers and devices to liste...

CVE-2023-40019

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.10.10, FreeSWITCH allows authorized users to cause a denial of service attack by sending...

Out-of-bounds

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.10.10, FreeSWITCH allows remote users to trigger out of bounds write by offering an ICE candida...