Summary

Security CVES
High CVE-2022-48390,CVE-2022-48391,CVE-2022-48392,CVE-2022-48438
Medium CVE-2022-48439,CVE-2022-48440,CVE-2022-48441,CVE-2022-48442,CVE-2022-48443,CVE-2022-48444,CVE-2022-48445,CVE-2022-48446,CVE-2022-48447,CVE-2022-48448,CVE-2023-30863,CVE-2023-30864,CVE-2023-30865,CVE-2023-30866,CVE-2023-30914,CVE-2023-30915

Minutia

CVE ID CVE-2022-48390
Title Missing Authorization in telephony service
Description
In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating High
CVSS Score 7.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-48391
Title Improper Check or Handling of Exceptional Conditions in telephony service
Description
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-703 Improper Check or Handling of Exceptional Conditions
Access Vector Local
CVSS Rating High
CVSS Score 7.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-48392
Title Missing Authorization in dialer service
Description
In dialer service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating High
CVSS Score 7.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12/Android13

CVE ID CVE-2022-48438
Title Out-of-bounds Write in cp_dump driver
Description
In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Kernel
Vulnerability Type CWE-787 Out-of-bounds Write
Access Vector Local
CVSS Rating High
CVSS Score 7.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android11/Android12/Android13

CVE ID CVE-2022-48439
Title Out-of-bounds Write in cp_dump driver
Description
In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Kernel
Vulnerability Type CWE-120 Classic Buffer Overflow
Access Vector Local
CVSS Rating Medium
CVSS Score 4.4
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android11/Android12/Android13

CVE ID CVE-2022-48440
Title Denial of Service in dialer
Description
In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-400 Denial of Service
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12/Android13

CVE ID CVE-2022-48441
Title Denial of Service in dialer
Description
In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-400 Denial of Service
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12/Android13

CVE ID CVE-2022-48442
Title NULL Pointer Dereference in dialer
Description
In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-476 NULL Pointer Dereference
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12/Android13

CVE ID CVE-2022-48443
Title NULL Pointer Dereference in telephony service
Description
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-476 NULL Pointer Dereference
Access Vector Local
CVSS Rating Medium
CVSS Score 5.9
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-48444
Title NULL Pointer Dereference in telephony service
Description
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-476 NULL Pointer Dereference
Access Vector Local
CVSS Rating Medium
CVSS Score 5.9
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-48445
Title NULL Pointer Dereference in telephony service
Description
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-476 NULL Pointer Dereference
Access Vector Local
CVSS Rating Medium
CVSS Score 5.9
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-48446
Title NULL Pointer Dereference in telephony service
Description
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-476 NULL Pointer Dereference
Access Vector Local
CVSS Rating Medium
CVSS Score 5.9
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-48447
Title NULL Pointer Dereference in telephony service
Description
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-476 NULL Pointer Dereference
Access Vector Local
CVSS Rating Medium
CVSS Score 5.9
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2022-48448
Title NULL Pointer Dereference in telephony service
Description
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-476 NULL Pointer Dereference
Access Vector Local
CVSS Rating Medium
CVSS Score 5.9
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2023-30863
Title Missing Authorization in Connectivity Service
Description
In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10

CVE ID CVE-2023-30864
Title Missing Authorization in Connectivity Service
Description
In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10

CVE ID CVE-2023-30865
Title Missing Authorization in dialer service
Description
In dialer service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200 Information Disclosure
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12/Android13

CVE ID CVE-2023-30866
Title Information disclosure in telephony service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200 Information Disclosure
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10

CVE ID CVE-2023-30914
Title Information disclosure in email service
Description
In email service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200 Information Disclosure
Access Vector Local
CVSS Rating Medium
CVSS Score 5.9
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

CVE ID CVE-2023-30915
Title Information disclosure in email service
Description
In email service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200 Information Disclosure
Access Vector Local
CVSS Rating Medium
CVSS Score 5.9
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Affected Software Versions
Android10/Android11/Android12

*The list of affected chipsets may not be complete. For latest information, device OEMs can contact directly at https://unisupport.unisoc.com

Vulnerability type definition

Abbreviation Interpretation
RCE Remote Code Execution
EoP Elevation of Privilege
ID Information Disclosure
DoS Denial of Service
N/A Classification not available

Version

Version Date Description
1.0 2023-06-03