Skip to content
OpenAdvisories
Low · 3.3 CVE-2022-25833 EUVD-2022-30473GHSA-jcgw-m6mj-82vv

Improper authentication in ImsService prior to SMR Apr-2022 Release 1 allows attackers to get IMSI without READ_PRIVILEGED_PHONE_STATE perm…

Published Apr 11, 2022 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper authentication in ImsService prior to SMR Apr-2022 Release 1 allows attackers to get IMSI without READ_PRIVILEGED_PHONE_STATE permission.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices Q(10), R(11) – < SMR Apr-2022 Release 1 SMR Apr-2022 Release 1

References