CVE-2021-39635: Google Android

Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days.

ims_ex is a vendor system service used to manage VoLTE in unisoc devices，But it does not verify the caller's permissions，so that normal apps (No phone permissions) can obtain some VoLTE sensitive information and manage VoLTE calls.Product: AndroidVersions: Android SoCAndroid ID: A-206492634

Affected products

• Google Android: affected versions not specified

Published 2022-02-11. Last modified 2026-06-17.