ismsEx service is a vendor service in unisoc equipment。ismsEx service is an extension of sms system service,but it does not check the permissions of the caller,resulting in permission leaks。Third-party apps can use this service to arbitrarily modify and set system properties。Product: AndroidVersions: Android SoCAndroid ID: A-207479207
During installation, installed file permissions are set to allow anyone to modify those files.
Link | Tags |
---|---|
https://source.android.com/security/bulletin/2022-02-01 | vendor advisory |