ismsEx service is a vendor service in unisoc equipment。ismsEx service is an extension of sms system service,but it does not check the permissions of the caller,resulting in permission leaks。Third-party apps can use this service to arbitrarily modify and set system properties。Product: AndroidVersions: Android SoCAndroid ID: A-207479207
No PoCs from references.
- https://github.com/ARPSyndicate/cvemon
- https://github.com/pokerfacett/MY_CVE_CREDIT