Design/Logic Flaw

In Telecom service, there is a possible missing permission check. This could lead to local denial of service with System execution privileges needed...

CVE-2023-40650

CVE-2023-40650 affects the Telecom service and is caused by a missing permission check that can allow local information disclosure without requiring additional execution privileges. Public information in connected sources confirms the issue and its impact, but does not provide product/version spe...

CVE-2023-40650

In Telecom service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-40650

In Telecom service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-40637

In telecom service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges...

CVE-2023-40638

CVE-2023-40638 affects UNISOC chipsets (Android Telecom service) where a missing permission check could allow a local Denial of Service with SYSTEM privileges required. The Red Hat/Android-related entries corroborate a local-impact scenario but do not provide explicit vulnerable versions or a con...

CVE-2023-40638

In Telecom service, there is a possible missing permission check. This could lead to local denial of service with System execution privileges needed...

CVE-2023-40636

CVE-2023-40636 relates to a vulnerability in the telecom service where a missing permission check could allow writing permission usage records for an app, enabling local information disclosure. The underlying issue requires System-level execution privileges for exploitation, with a CVSSv3.1 base ...

CVE-2023-40636

In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with System execution privileges needed...

CVE-2023-40636

In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with System execution privileges needed...

CVE-2023-40637

CVE-2023-40637 involves UNISOC chipsets’ telecom service where a missing permission check could allow local information disclosure without executing code or elevating privileges. The NVD entry notes a local attack vector with low adversarial effort and low privileges required, exposing high-confi...

CVE-2023-40638

In Telecom service, there is a possible missing permission check. This could lead to local denial of service with System execution privileges needed...

CVE-2023-40637

In telecom service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. UNISOC Chipsets has a security vulnerability that stems from a lack of privilege checking in telecom. An attacker could exploit the vulnerability to cause information leakage...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of privilege checking in Telecom. An attacker could exploit this vulnerability to cause a denial of service...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of privilege checking in Telecom. An attacker could exploit the vulnerability to cause information leakage...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. UNISOC Chipsets has a security vulnerability that stems from a lack of privilege checking in telecom. An attacker could exploit the vulnerability to cause information leakage...

PT-2023-27572 · Unknown · Telecom Service

Name of the Vulnerable Software and Affected Versions: Telecom service affected versions not specified Description: The issue is related to a possible missing permission check in the Telecom service. This could lead to local information disclosure with no additional execution privileges needed...

PT-2023-27559 · Unknown · Telecom Service

Name of the Vulnerable Software and Affected Versions: Telecom service affected versions not specified Description: The issue is related to a possible missing permission check in the Telecom service, which could lead to local denial of service. System execution privileges are needed to exploit th...

CVE-2023-44126

The CVE-2023-44126 issue concerns the Android Call management component (com.android.server.telecom) patched by LG. The vulnerability arises because LG’s patch sends a large number of LG-owned implicit broadcasts that disclose sensitive telephony data to all third-party apps on the same device. T...