← Database

CVE-2021-39658

CRITICAL CVSS: 9.8 Published: 2022-02-11 Modified: 2026-06-17

Description

ismsEx service is a vendor service in unisoc equipment。ismsEx service is an extension of sms system service，but it does not check the permissions of the caller，resulting in permission leaks。Third-party apps can use this service to arbitrarily modify and set system properties。Product: AndroidVersions: Android SoCAndroid ID: A-207479207

Affected Platforms

Google Android

Weakness Type

CWE-276

References