Summary

Security CVES
High CVE-2022-38676,CVE-2022-39105,CVE-2022-2985,CVE-2022-38670,CVE-2022-38669,CVE-2022-2984,CVE-2022-38673,CVE-2022-38672,CVE-2022-38690
Medium CVE-2022-39128,CVE-2022-39127,CVE-2022-39126,CVE-2022-39125,CVE-2022-39124,CVE-2022-39123,CVE-2022-39122,CVE-2022-39121,CVE-2022-39120,CVE-2022-39115,CVE-2022-39114,CVE-2022-39113,CVE-2022-39112,CVE-2022-39111,CVE-2022-39110,CVE-2022-39109,CVE-2022-39108,CVE-2022-38679,CVE-2022-39107,CVE-2022-39103,CVE-2022-39080,CVE-2022-38698,CVE-2022-38697,CVE-2022-39117,CVE-2022-38687,CVE-2022-38677,CVE-2022-38689,CVE-2022-38688,CVE-2022-38671

Minutia

CVE ID CVE-2022-38676
Title Heap-based buffer overflow in gpu driver
Description
In gpu driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Technology Area Kernel
Vulnerability Type CWE-787 Out-of-bounds Write
Access Vector Local
CVSS Rating High
CVSS Score 7.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-39105
Title Integer Overflow in sensor driver
Description
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Technology Area Kernel
Vulnerability Type CWE-190 Integer Overflow
Access Vector Local
CVSS Rating High
CVSS Score 7.9
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-2985
Title Elevation of privilege in Music service
Description
In music service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating High
CVSS Score 7.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11

CVE ID CVE-2022-38670
Title Elevation of privilege in soundrecorder service
Description
In soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating High
CVSS Score 7.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-38669
Title Elevation of privilege in soundrecorder service
Description
In soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating High
CVSS Score 7.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-2984
Title Heap-based buffer overflow in jpg driver
Description
In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Technology Area Kernel
Vulnerability Type CWE-787 Out-of-bounds Write
Access Vector Local
CVSS Rating High
CVSS Score 7.9
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions

Android10/Android11/Android12

CVE ID CVE-2022-38673
Title Buffer Over-read in face detect driver
Description
In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Technology Area Kernel
Vulnerability Type CWE-126 Buffer Over-read
Access Vector Local
CVSS Rating High
CVSS Score 7.9
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions

Android10/Android11/Android12

CVE ID CVE-2022-38672
Title Stack-based Buffer Overflow in face detect driver
Description
In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Technology Area Kernel
Vulnerability Type CWE-121 Stack-based Buffer Overflow
Access Vector Local
CVSS Rating High
CVSS Score 7.9
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N
Affected Chipsets*

SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions

Android10/Android11/Android12

CVE ID CVE-2022-38690
Title Improper restriction of operations within the bounds of a memory buffer in camera driver
Description
In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of service in kernel.
Technology Area Kernel
Vulnerability Type CWE-119
Access Vector Local
CVSS Rating High
CVSS Score 7.9
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
AAndroid10/Android11/Android12

CVE ID CVE-2022-39128
Title Integer Overflow in sensor driver
Description
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Technology Area Kernel
Vulnerability Type CWE-400 Uncontrolled Resource Consumption
Access Vector Local
CVSS Rating Medium
CVSS Score 5.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-39127
Title Integer Overflow in sensor driver
Description
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Technology Area Kernel
Vulnerability Type CWE-400 Uncontrolled Resource Consumption
Access Vector Local
CVSS Rating Medium
CVSS Score 5.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-39126
Title Integer Overflow in sensor driver
Description
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Technology Area Kernel
Vulnerability Type CWE-400 Uncontrolled Resource Consumption
Access Vector Local
CVSS Rating Medium
CVSS Score 5.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-39125
Title Integer Overflow in sensor driver
Description
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Technology Area Kernel
Vulnerability Type CWE-400 Uncontrolled Resource Consumption
Access Vector Local
CVSS Rating Medium
CVSS Score 5.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-39124
Title Integer Overflow in sensor driver
Description
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Technology Area Kernel
Vulnerability Type CWE-400 Uncontrolled Resource Consumption
Access Vector Local
CVSS Rating Medium
CVSS Score 5.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-39123
Title Integer Overflow in sensor driver
Description
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Technology Area Kernel
Vulnerability Type CWE-400 Uncontrolled Resource Consumption
Access Vector Local
CVSS Rating Medium
CVSS Score 5.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-39122
Title Integer Overflow in sensor driver
Description
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Technology Area Kernel
Vulnerability Type CWE-120 Buffer Overflow
Access Vector Local
CVSS Rating Medium
CVSS Score 5.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-39121
Title Integer Overflow in sensor driver
Description
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Technology Area Kernel
Vulnerability Type CWE-120 Buffer Overflow
Access Vector Local
CVSS Rating Medium
CVSS Score 5.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-39120
Title Integer Overflow in sensor driver
Description
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Technology Area Android
Vulnerability Type CWE-120 Buffer Overflow
Access Vector Local
CVSS Rating Medium
CVSS Score 5.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions

Android10/Android11/Android12

CVE ID CVE-2022-39115
Title Denial of service in Music service
Description
In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11

CVE ID CVE-2022-39114
Title Denial of service in Music service
Description
In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11

CVE ID CVE-2022-39113
Title Denial of service in Music service
Description
In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions

Android10/Android11

CVE ID CVE-2022-39112
Title Denial of service in Music service
Description
In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11

CVE ID CVE-2022-39111
Title Denial of service in Music service
Description
In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-39110
Title Denial of service in Music service
Description
In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-39109
Title Denial of service in Music service
Description
In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11

CVE ID CVE-2022-39108
Title Denial of service in Music service
Description
In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-38679
Title Denial of service in music service
Description
In music service, there is a missing permission check. This could lead to local denial of service in music service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-400 Uncontrolled Resource Consumption
Access Vector Local
CVSS Rating Medium
CVSS Score 5.5
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-39107
Title Elevation of privilege in Soundrecorder service
Description
In Soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in Soundrecorder service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-39103
Title Denial of service in Gallery service
Description
In Gallery service, there is a missing permission check. This could lead to local denial of service in Gallery service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 5.5
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-39080
Title Elevation of privilege in messaging service
Description
In messaging service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-38698
Title Elevation of privilege in messaging service
Description

In messaging service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-38697
Title Information disclosure in messaging service
Description
In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-39117
Title Information disclosure in messaging service
Description
In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-38687
Title Denial of service in messaging service
Description
In messaging service, there is a missing permission check. This could lead to local denial of service in messaging service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-400 Uncontrolled Resource Consumption
Access Vector Local
CVSS Rating Medium
CVSS Score 5.5
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-38677
Title Denial of service in cellbroadcastreceiver
Description
In cell service, there is a missing permission check. This could lead to local denial of service in cell service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-400 Uncontrolled Resource Consumption
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-38689
Title Information disclosure in telephony service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200 Information Disclosure
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-38688
Title Information disclosure in telephony service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200 Information Disclosure
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-38671
Title Heap-based buffer overflow in camera driver
Description
In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Technology Area Kernel
Vulnerability Type CWE-126 Buffer Over-read
Access Vector Local
CVSS Rating Medium
CVSS Score 6.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

*The list of affected chipsets may not be complete. For latest information, device OEMs can contact directly at https://unisupport.unisoc.com

Vulnerability type definition

Abbreviation Interpretation
RCE Remote Code Execution
EoP Elevation of Privilege
ID Information Disclosure
DoS Denial of Service
N/A Classification not available

Version

Version Date Description
1.0 2022-11-08