What’s Vulnerable › Vulnerabilities

CVE-2021-39635

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-02-11 · updated 2026-06-17
• Weakness: CWE-276

Description

ims_ex is a vendor system service used to manage VoLTE in unisoc devices，But it does not verify the caller's permissions，so that normal apps (No phone permissions) can obtain some VoLTE sensitive information and manage VoLTE calls.Product: AndroidVersions: Android SoCAndroid ID: A-206492634

Affected products

• Android: all versions

References

• https://source.android.com/security/bulletin/2022-02-01
• https://source.android.com/security/bulletin/2022-02-01

Get alerted when CVE-2021-39635 or the next vulnerability affects your stack