CVE-2022-25833

LOW CVSS: 3.3 Published: 2022-04-11 Modified: 2026-06-17

Description

Improper authentication in ImsService prior to SMR Apr-2022 Release 1 allows attackers to get IMSI without READ_PRIVILEGED_PHONE_STATE permission.

Affected Platforms

Google Android

Weakness Type

CWE-287, CWE-287

References