Summary

Security CVES
High CVE-2022-48454,CVE-2022-48455,CVE-2022-48456,CVE-2022-48457,CVE-2022-48458,CVE-2022-48459,CVE-2022-48461
Medium CVE-2023-42671,CVE-2023-42672,CVE-2023-42673,CVE-2023-42674,CVE-2023-42675,CVE-2023-42676,CVE-2023-42677,CVE-2023-42678,CVE-2023-42679,CVE-2023-42680,CVE-2023-42681,CVE-2023-42682,CVE-2023-42683,CVE-2023-42684,CVE-2023-42685,CVE-2023-42686,CVE-2023-42687,CVE-2023-42688,CVE-2023-42689,CVE-2023-42690,CVE-2023-42691,CVE-2023-42692,CVE-2023-42693,CVE-2023-42694,CVE-2023-42695,CVE-2023-42696,CVE-2023-42697,CVE-2023-42698,CVE-2023-42699,CVE-2023-42700,CVE-2023-42701,CVE-2023-42702,CVE-2023-42703,CVE-2023-42704,CVE-2023-42705,CVE-2023-42706,CVE-2023-42707,CVE-2023-42708,CVE-2023-42709,CVE-2023-42710,CVE-2023-42711,CVE-2023-42712,CVE-2023-42713,CVE-2023-42714,CVE-2023-42715,CVE-2023-42716,CVE-2023-42717,CVE-2023-42718,CVE-2023-42719,CVE-2023-42720,CVE-2023-42721,CVE-2023-42722,CVE-2023-42723,CVE-2023-42724,CVE-2023-42725,CVE-2023-42726,CVE-2023-42727,CVE-2023-42728,CVE-2023-42729,CVE-2023-42730,CVE-2023-42731,CVE-2023-42751,CVE-2022-48462,CVE-2022-48463,CVE-2022-48464,CVE-2023-42732,CVE-2023-42733,CVE-2023-42734,CVE-2023-42735,CVE-2023-42736,CVE-2023-42737,CVE-2023-42738,CVE-2023-42739,CVE-2023-42740,CVE-2023-42741,CVE-2023-42742,CVE-2023-42743,CVE-2023-42744,CVE-2023-42745,CVE-2023-42746,CVE-2023-42747,CVE-2023-42748,CVE-2023-42749

Minutia

CVE ID CVE-2023-42671
Title Exposure of Sensitive Information to an Unauthorized Actor in imsservice
Description
In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42672
Title Exposure of Sensitive Information to an Unauthorized Actor in imsservice
Description
In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42673
Title Exposure of Sensitive Information to an Unauthorized Actor in imsservice
Description
In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42674
Title Exposure of Sensitive Information to an Unauthorized Actor in imsservice
Description
In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42675
Title Exposure of Sensitive Information to an Unauthorized Actor in imsservice
Description
In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42676
Title Exposure of Sensitive Information to an Unauthorized Actor in imsservice
Description
In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42677
Title Exposure of Sensitive Information to an Unauthorized Actor in imsservice
Description
In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42678
Title Exposure of Sensitive Information to an Unauthorized Actor in imsservice
Description
In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42679
Title Out-of-bounds Write in gpu driver
Description
In gpu driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type cwe-787 Out-of-bounds Write
Access Vector Local
CVSS Rating Medium
CVSS Score 5.6
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H
Affected Chipsets*
SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42680
Title Out-of-bounds Read in gpu driver
Description
In gpu driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Kernel
Vulnerability Type cwe-125 Out-of-bounds Read
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
Affected Chipsets*
SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42681
Title Missing Authorization in ion service
Description
In ion service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42682
Title Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in gsp driver
Description
In gsp driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Kernel
Vulnerability Type cwe-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42683
Title Out-of-bounds Read in gsp driver
Description
In gsp driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Kernel
Vulnerability Type cwe-125 Out-of-bounds Read
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42684
Title Out-of-bounds Read in gsp driver
Description
In gsp driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Kernel
Vulnerability Type cwe-125 Out-of-bounds Read
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42685
Title Missing Authorization in wifi service
Description
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42686
Title Missing Authorization in wifi service
Description
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42687
Title Missing Authorization in wifi service
Description
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42688
Title Missing Authorization in wifi service
Description
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42689
Title Missing Authorization in wifi service
Description
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42690
Title Missing Authorization in wifi service
Description
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42691
Title Missing Authorization in wifi service
Description
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42692
Title Missing Authorization in wifi service
Description
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42693
Title Missing Authorization in wifi service
Description
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42694
Title Missing Authorization in wifi service
Description
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42695
Title Missing Authorization in wifi service
Description
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42696
Title Missing Authorization in telecom service
Description
In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 6.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42697
Title Exposure of Sensitive Information to an Unauthorized Actor in omacp service
Description
In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42698
Title Exposure of Sensitive Information to an Unauthorized Actor in omacp service
Description
In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42699
Title Exposure of Sensitive Information to an Unauthorized Actor in omacp service
Description
In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42700
Title Exposure of Sensitive Information to an Unauthorized Actor in firewall service
Description
In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42701
Title Exposure of Sensitive Information to an Unauthorized Actor in firewall service
Description
In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42702
Title Exposure of Sensitive Information to an Unauthorized Actor in firewall service
Description
In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42703
Title Exposure of Sensitive Information to an Unauthorized Actor in firewall service
Description
In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42704
Title Exposure of Sensitive Information to an Unauthorized Actor in imsservice
Description
In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42705
Title Exposure of Sensitive Information to an Unauthorized Actor in imsservice
Description
In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42706
Title Exposure of Sensitive Information to an Unauthorized Actor in firewall service
Description
In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42707
Title Exposure of Sensitive Information to an Unauthorized Actor in firewall service
Description
In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42708
Title Exposure of Sensitive Information to an Unauthorized Actor in firewall service
Description
In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42709
Title Exposure of Sensitive Information to an Unauthorized Actor in firewall service
Description
In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42710
Title Exposure of Sensitive Information to an Unauthorized Actor in firewall service
Description
In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42711
Title Exposure of Sensitive Information to an Unauthorized Actor in firewall service
Description
In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42712
Title Exposure of Sensitive Information to an Unauthorized Actor in firewall service
Description
In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42713
Title Exposure of Sensitive Information to an Unauthorized Actor in firewall service
Description
In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42714
Title Exposure of Sensitive Information to an Unauthorized Actor in firewall service
Description
In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42715
Title Exposure of Sensitive Information to an Unauthorized Actor in telephony service
Description
In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42716
Title Exposure of Sensitive Information to an Unauthorized Actor in telephony service
Description
In telephony service, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42717
Title Exposure of Sensitive Information to an Unauthorized Actor in telephony service
Description
In telephony service, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42718
Title Exposure of Sensitive Information to an Unauthorized Actor in dialer
Description
In dialer, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42719
Title Out-of-bounds Read in video service
Description
In video service, there is a possible out of bounds read due to a incorrect bounds check. This could lead to local denial of service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-125 Out-of-bounds Read
Access Vector Network
CVSS Rating Medium
CVSS Score 6.5
CVSS String CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected Chipsets*
T606/T612/T616

CVE ID CVE-2023-42720
Title Out-of-bounds Read in video service
Description
In video service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-125 Out-of-bounds Read
Access Vector Network
CVSS Rating Medium
CVSS Score 6.5
CVSS String CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected Chipsets*
T760/T770/T820/S8000

CVE ID CVE-2023-42721
Title Improper Restriction of Operations within the Bounds of a Memory Buffer in flv extractor
Description
In flv extractor, there is a possible missing verification incorrect input. This could lead to local denial of service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-119ImproperRestrictionofOperationswithintheBoundsofaMemory B
Access Vector Network
CVSS Rating Medium
CVSS Score 4.3
CVSS String CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected Chipsets*
SC9863A

CVE ID CVE-2023-42722
Title Improper Restriction of Operations within the Bounds of a Memory Buffer in camera service
Description
In camera service, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed.
Technology Area Android
Vulnerability Type cwe-119ImproperRestrictionofOperationswithintheBoundsofaMemory B
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42723
Title Out-of-bounds Read in camera service
Description
In camera service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-125 Out-of-bounds Read
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42724
Title Out-of-bounds Read in gpu driver
Description
In gpu driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Kernel
Vulnerability Type cwe-125 Out-of-bounds Read
Access Vector Local
CVSS Rating Medium
CVSS Score 5.6
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H
Affected Chipsets*
SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42725
Title Out-of-bounds Read in gpu driver
Description
In gpu driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Kernel
Vulnerability Type cwe-125 Out-of-bounds Read
Access Vector Local
CVSS Rating Medium
CVSS Score 5.6
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H
Affected Chipsets*
SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42726
Title Out-of-bounds Read in TeleService
Description
In TeleService, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type cwe-125 Out-of-bounds Read
Access Vector Local
CVSS Rating Medium
CVSS Score 5.6
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H
Affected Chipsets*
SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42727
Title Out-of-bounds Write in gpu driver
Description
In gpu driver, there is a possible out of bounds write due to a incorrect bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Kernel
Vulnerability Type cwe-787 Out-of-bounds Write
Access Vector Local
CVSS Rating Medium
CVSS Score 5.6
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H
Affected Chipsets*
SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42728
Title Out-of-bounds Read in phasecheckserver
Description
In phasecheckserver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-125 Out-of-bounds Read
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42729
Title Out-of-bounds Write in ril service
Description
In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type cwe-787 Out-of-bounds Write
Access Vector Local
CVSS Rating Medium
CVSS Score 6.7
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42730
Title Exposure of Sensitive Information to an Unauthorized Actor in IMS service
Description
In IMS service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42731
Title Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Gnss service
Description
In Gnss service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type cwe-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Access Vector Local
CVSS Rating Medium
CVSS Score 4.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Affected Chipsets*
T606/T612/T616

CVE ID CVE-2023-42751
Title Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in gnss service
Description
In gnss service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area WCN
Vulnerability Type cwe-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Access Vector Local
CVSS Rating Medium
CVSS Score 5.9
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2022-48462
Title Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in wifi service
Description
In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Access Vector Local
CVSS Rating Medium
CVSS Score 6.7
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2022-48463
Title Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in wifi service
Description
In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Access Vector Local
CVSS Rating Medium
CVSS Score 6.7
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2022-48464
Title Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in wifi service
Description
In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Access Vector Local
CVSS Rating Medium
CVSS Score 6.7
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42732
Title Exposure of Sensitive Information to an Unauthorized Actor in telephony service
Description
In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42733
Title Exposure of Sensitive Information to an Unauthorized Actor in telephony service
Description
In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42734
Title Exposure of Sensitive Information to an Unauthorized Actor in telephony service
Description
In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42735
Title Exposure of Sensitive Information to an Unauthorized Actor in telephony service
Description
In telephony service, there is a possible missing permission check. This could lead to local information disclosure with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42736
Title Missing Authorization in telecom service
Description
In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 4.4
CVSS String CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42737
Title Exposure of Sensitive Information to an Unauthorized Actor in telecom service
Description
In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42738
Title Missing Authorization in telocom service
Description
In telocom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 5.7
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42739
Title Exposure of Sensitive Information to an Unauthorized Actor in engineermode service
Description
In engineermode service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42740
Title Missing Authorization in telecom service
Description
In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42741
Title Exposure of Sensitive Information to an Unauthorized Actor in telecom service
Description
In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42742
Title Missing Authorization in sysui
Description
In sysui, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42743
Title Missing Authorization in telecom service
Description
In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42744
Title Missing Authorization in telecom service
Description
In telecom service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42745
Title Missing Authorization in telecom service
Description
In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42746
Title Missing Authorization in power manager
Description
In power manager, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42747
Title Missing Authorization in camera service
Description
In camera service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42748
Title Missing Authorization in telecom service
Description
In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42749
Title Exposure of Sensitive Information to an Unauthorized Actor in enginnermode service
Description
In enginnermode service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2022-48454
Title Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in wifi service
Description
In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
Technology Area Android
Vulnerability Type cwe-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Access Vector Local
CVSS Rating High
CVSS Score 8.4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2022-48455
Title Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in wifi service
Description
In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
Technology Area Android
Vulnerability Type cwe-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Access Vector Local
CVSS Rating High
CVSS Score 8.4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2022-48456
Title Improper Restriction of Operations within the Bounds of a Memory Buffer in camera driver
Description
In camera driver, there is a possible out of bounds write due to a incorrect bounds check. This could lead to local denial of service with System execution privileges needed
Technology Area Kernel
Vulnerability Type cwe-119ImproperRestrictionofOperationswithintheBoundsofaMemory B
Access Vector Local
CVSS Rating High
CVSS Score 7.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2022-48457
Title Incorrect Permission Assignment for Critical Resource in TeleService
Description
In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed
Technology Area Android
Vulnerability Type cwe-732 Incorrect Permission Assignment for Critical Resource
Access Vector Local
CVSS Rating High
CVSS Score 7.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2022-48458
Title Incorrect Permission Assignment for Critical Resource in TeleService
Description
In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed
Technology Area Android
Vulnerability Type cwe-732 Incorrect Permission Assignment for Critical Resource
Access Vector Local
CVSS Rating High
CVSS Score 7.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2022-48459
Title Incorrect Permission Assignment for Critical Resource in TeleService
Description
In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed
Technology Area Android
Vulnerability Type cwe-732 Incorrect Permission Assignment for Critical Resource
Access Vector Local
CVSS Rating High
CVSS Score 7.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2022-48461
Title Stack-based Buffer Overflow in sensor driver
Description
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
Technology Area Kernel
Vulnerability Type cwe-121 Stack-based Buffer Overflow
Access Vector Local
CVSS Rating High
CVSS Score 7.3
CVSS String CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

*The list of affected chipsets may not be complete. For latest information, device OEMs can contact directly at https://unisupport.unisoc.com

Vulnerability type definition

Abbreviation Interpretation
RCE Remote Code Execution
EoP Elevation of Privilege
ID Information Disclosure
DoS Denial of Service
N/A Classification not available

Version

Version Date Description
1.0 2023-12-03