Summary

Security CVES
Medium CVE-2023-30916,CVE-2023-30917,CVE-2023-30918,CVE-2023-30919,CVE-2023-30920,CVE-2023-30921,CVE-2023-30922,CVE-2023-30923,CVE-2023-30924,CVE-2023-30925,CVE-2023-30926,CVE-2023-30927,CVE-2023-30928,CVE-2023-30929,CVE-2023-30930,CVE-2023-30931,CVE-2023-30932,CVE-2023-30933,CVE-2023-30934,CVE-2023-30935,CVE-2023-30936,CVE-2023-30937,CVE-2023-30938,CVE-2023-30939,CVE-2023-30940,CVE-2023-30941,CVE-2023-30942,CVE-2023-30913,CVE-2023-33898,CVE-2023-33899,CVE-2023-33900,CVE-2023-32788,CVE-2023-32789,CVE-2023-33879,CVE-2023-33880,CVE-2023-33881,CVE-2023-33882,CVE-2023-33883,CVE-2023-33884,CVE-2023-33885,CVE-2023-33886,CVE-2023-33887,CVE-2023-33888,CVE-2023-33889,CVE-2023-33890,CVE-2023-33891,CVE-2023-33892,CVE-2023-33893,CVE-2023-33894,CVE-2023-33895,CVE-2023-33896,CVE-2023-33897,CVE-2023-33901,CVE-2023-33902,CVE-2023-33903,CVE-2022-48450,CVE-2023-33904,CVE-2023-33905,CVE-2022-48451

Minutia

CVE ID CVE-2023-30916
Title Missing Authorization in DMService
Description
In DMService, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 5.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-30917
Title Missing Authorization in DMService
Description
In DMService, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 5.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-30918
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 5.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-30919
Title Exposure of Sensitive Information to an Unauthorized Actor in Messaging Service
Description
In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 5.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-30920
Title Exposure of Sensitive Information to an Unauthorized Actor in Messaging Service
Description
In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 5.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-30921
Title Exposure of Sensitive Information to an Unauthorized Actor in Messaging Service
Description
In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 5.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-30922
Title Exposure of Sensitive Information to an Unauthorized Actor in Messaging Service
Description
In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 5.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-30923
Title Exposure of Sensitive Information to an Unauthorized Actor in Messaging Service
Description
In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 5.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-30924
Title Exposure of Sensitive Information to an Unauthorized Actor in Messaging Service
Description
In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 5.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-30925
Title Exposure of Sensitive Information to an Unauthorized Actor in opm service
Description
In opm service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 5.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-30926
Title Exposure of Sensitive Information to an Unauthorized Actor in opm service
Description
In opm service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 5.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-30927
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-30928
Title Missing Authorization in Telephony Service
Description
In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-30929
Title Missing Authorization in Telephony Service
Description
In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-30930
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 5.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-30931
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-30932
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-30933
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-30934
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-30935
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-30936
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-30937
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-30938
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-30939
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-30940
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-30941
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-30942
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-30913
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-33898
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-33899
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-33900
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-32788
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-32789
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-33879
Title Exposure of Sensitive Information to an Unauthorized Actor in Music Service
Description
In music service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-33880
Title Exposure of Sensitive Information to an Unauthorized Actor in Music Service
Description
In music service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-33881
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-33882
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-33883
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-33884
Title Exposure of Sensitive Information to an Unauthorized Actor in Messaging Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 5.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-33885
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-33886
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-33887
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-33888
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-33889
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-33890
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-33891
Title Exposure of Sensitive Information to an Unauthorized Actor in Telephony Service
Description
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-33892
Title Exposure of Sensitive Information to an Unauthorized Actor in FastDial Service
Description
In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8001

CVE ID CVE-2023-33893
Title Exposure of Sensitive Information to an Unauthorized Actor in FastDial Service
Description
In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8002

CVE ID CVE-2023-33894
Title Exposure of Sensitive Information to an Unauthorized Actor in FastDial Service
Description
In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8003

CVE ID CVE-2023-33895
Title Exposure of Sensitive Information to an Unauthorized Actor in FastDial Service
Description
In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8004

CVE ID CVE-2023-33896
Title Out of Bounds Write in libimpl-ril
Description
In libimpl-ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-787 Out-of-bounds Write
Access Vector Local
CVSS Rating Medium
CVSS Score 6.7
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8005

CVE ID CVE-2023-33897
Title Out of Bounds Write in libimpl-ril
Description
In libimpl-ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-787 Out-of-bounds Write
Access Vector Local
CVSS Rating Medium
CVSS Score 6.7
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8006

CVE ID CVE-2023-33901
Title Exposure of Sensitive Information to an Unauthorized Actor in bluetooth
Description
In bluetooth service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-33902
Title Exposure of Sensitive Information to an Unauthorized Actor in bluetooth
Description
In bluetooth service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-33903
Title Classic Buffer Overflow in FM service
Description
In FM service, there is a possible missing params check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-120 Classic Buffer Overflow
Access Vector Local
CVSS Rating Medium
CVSS Score 4.4
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8001

CVE ID CVE-2022-48450
Title Denial of Service in bluetooth service
Description
In bluetooth service, there is a possible missing params check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-400 Denial of Service
Access Vector Local
CVSS Rating Medium
CVSS Score 4.2
CVSS String CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-33904
Title Buffer Over-read in hci server
Description
In hci_server, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-126 Buffer Over-read
Access Vector Local
CVSS Rating Medium
CVSS Score 4.2
CVSS String CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2023-33905
Title Out-of-bounds Write in iwnpi server
Description
In iwnpi server, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-787 Out-of-bounds Write
Access Vector Local
CVSS Rating Medium
CVSS Score 5
CVSS String CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48451
Title Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in gnss_dbg driver
Description
In bluetooth service, there is a possible out of bounds write due to race condition. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Access Vector Local
CVSS Rating Medium
CVSS Score 4.4
CVSS String CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

*The list of affected chipsets may not be complete. For latest information, device OEMs can contact directly at https://unisupport.unisoc.com

Vulnerability type definition

Abbreviation Interpretation
RCE Remote Code Execution
EoP Elevation of Privilege
ID Information Disclosure
DoS Denial of Service
N/A Classification not available

Version

Version Date Description
1.0 2023-07-06