VDB

CVE-2021-39635

CVE-2021-39635 PUBLISHED CVSS 9.100000381469727 CRITICAL

ims_ex is a vendor system service used to manage VoLTE in unisoc devices?But it does not verify the caller's permissions?so that normal apps (No phone permissions) can obtain some VoLTE sensitive information and manage VoLTE calls.Product: AndroidVersions: Android SoCAndroid ID: A-206492634

EPSS 0.11% · 29.5th percentile

Risk Scores

CVSS 3.1
9.100000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS Score
0.11%
29.5th percentile

Affected Products

VendorProductVersions
n/aAndroidAndroid SoC
googleandroid

Timeline

  • Feb 8, 2022 CVE Published
  • Feb 13, 2022 EPSS Score
  • Apr 6, 2022 EPSS Score
  • May 29, 2022 EPSS Score
  • Jul 21, 2022 EPSS Score
  • Sep 11, 2022 EPSS Score
  • Nov 2, 2022 EPSS Score
  • Dec 25, 2022 EPSS Score
  • Feb 15, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 8, 2023 EPSS Score
  • May 30, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›