CVE-2022-38670

In soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed.

Score

CVSS 3.1 7.8 High

Status

Modified - security@unisoc.com

Published

2022-10-14

Last modified

2025-05-15

Weaknesses

CWE-862

Affected products

• Android (Google)
• Sc9863asc9832esc7731et610t310t606t760t610t618t606t612t616t760t770t820s8000 (Unisoc Shanghai Technologies Co. Ltd.)

References

• https://www.unisoc.com/en_us/secy/announcementDetail/1575654905820020738