CVE-2023-42697

In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

Score

CVSS 3.1 5.5 Medium

Status

Modified - security@unisoc.com

Published

2023-12-04

Last modified

2024-08-02

Weaknesses

CWE-862

Affected products

• Android (Google)
• Sc7731esc9832esc9863at310t606t612t616t610t618t760t770t820s8000 (Unisoc Shanghai Technologies Co. Ltd.)

References

• https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1731138365803…