In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.Referenceshttps://www.unisoc.com/en_us/secy/announcementDetail/1610118225591336001
