Description

Improper access control vulnerability in IpcRxServiceModeBigDataInfo in RIL prior to SMR Nov-2022 Release 1 allows local attacker to access Device information.

Related CPE's

o

google

android

3

References

https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=11

Vendor Advisory

https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=11

Vendor Advisory

Weaknesses

[email protected]

Secondary
CWE-280

[email protected]

Primary
CWE-755

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

5.9 · Medium

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2022-11-09T21:15:18.380Z

3 years ago

Last modified

2024-11-21T06:18:27.827Z

1 year ago