Summary

Security CVES
High CVE-2023-48340,CVE-2023-48341,CVE-2023-48342,CVE-2023-48343,CVE-2023-48344,CVE-2023-48348,CVE-2023-48349,CVE-2023-48350,CVE-2023-48351,CVE-2023-48352
Medium CVE-2023-48339,CVE-2023-48345,CVE-2023-48346,CVE-2023-48347,CVE-2023-48353,CVE-2023-48354,CVE-2023-48355,CVE-2023-48356,CVE-2023-48357,CVE-2023-48358,CVE-2023-48359

Minutia

CVE ID CVE-2023-48339
Title Exposure of Sensitive Information to an Unauthorized Actor in jpg driver
Description
In jpg driver, there is a possible missing permission check. This could lead to local information disclosure with System execution privileges needed.
Technology Area Kernel
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4.4
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-48340
Title Out-of-bounds Write in video decoder
Description
In video decoder, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-787 Out-of-bounds Write
Access Vector Network
CVSS Rating High
CVSS Score 7.5
CVSS String CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-48341
Title Out-of-bounds Read in video decoder
Description
In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-125 Out-of-bounds Read
Access Vector Network
CVSS Rating High
CVSS Score 8.2
CVSS String CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-48342
Title Out-of-bounds Write in media service
Description
In media service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-787 Out-of-bounds Write
Access Vector Network
CVSS Rating High
CVSS Score 7.5
CVSS String CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-48343
Title Out-of-bounds Write in video decoder
Description
In video decoder, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-787 Out-of-bounds Write
Access Vector Network
CVSS Rating High
CVSS Score 7.5
CVSS String CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-48344
Title Buffer Over-read in video decoder
Description
In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-126 Buffer Over-read
Access Vector Network
CVSS Rating High
CVSS Score 7.5
CVSS String CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-48345
Title Out-of-bounds Read in video decoder
Description
In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-125 Out-of-bounds Read
Access Vector Network
CVSS Rating Medium
CVSS Score 6.5
CVSS String CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-48346
Title Improper Input Validation in video decoder
Description
In video decoder, there is a possible improper input validation. This could lead to local denial of service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-20 Improper Input Validation
Access Vector Network
CVSS Rating Medium
CVSS Score 5.8
CVSS String CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-48347
Title Out-of-bounds Read in video decoder
Description
In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-125 Out-of-bounds Read
Access Vector Network
CVSS Rating Medium
CVSS Score 5.3
CVSS String CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-48348
Title Out-of-bounds Write in video decoder
Description
In video decoder, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-787 Out-of-bounds Write
Access Vector Network
CVSS Rating High
CVSS Score 7.5
CVSS String CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-48349
Title Out-of-bounds Write in video decoder
Description
In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-787 Out-of-bounds Write
Access Vector Network
CVSS Rating High
CVSS Score 7.5
CVSS String CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-48350
Title Out-of-bounds Write in video decoder
Description
In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-787 Out-of-bounds Write
Access Vector Network
CVSS Rating High
CVSS Score 7.5
CVSS String CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-48351
Title Out-of-bounds Write in video decoder
Description
In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-787 Out-of-bounds Write
Access Vector Network
CVSS Rating High
CVSS Score 7.5
CVSS String CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-48352
Title Out-of-bounds Write in phasecheckserver
Description
In phasecheckserver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-787 Out-of-bounds Write
Access Vector Local
CVSS Rating High
CVSS Score 7.8
CVSS String CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-48353
Title Use After Free in vsp driver
Description
In vsp driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed.
Technology Area Kernel
Vulnerability Type CWE-416 Use After Free
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-48354
Title Exposure of Sensitive Information to an Unauthorized Actor in telephone service
Description
In telephone service, there is a possible improper input validation. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-48355
Title Out-of-bounds Write in jpg driver
Description
In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-787 Out-of-bounds Write
Access Vector Local
CVSS Rating Medium
CVSS Score 6.8
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-48356
Title Out-of-bounds Write in jpg driver
Description
In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-787 Out-of-bounds Write
Access Vector Local
CVSS Rating Medium
CVSS Score 6.8
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-48357
Title Out-of-bounds Write in vsp driver
Description
In vsp driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Kernel
Vulnerability Type CWE-787 Out-of-bounds Write
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-48358
Title Out-of-bounds Write in drm driver
Description
In drm driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Kernel
Vulnerability Type CWE-787 Out-of-bounds Write
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-48359
Title Out-of-bounds Write in autotest driver
Description
In autotest driver, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with System execution privileges needed.
Technology Area Kernel
Vulnerability Type CWE-787 Out-of-bounds Write
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

*The list of affected chipsets may not be complete. For latest information, device OEMs can contact directly at https://unisupport.unisoc.com

Vulnerability type definition

Abbreviation Interpretation
RCE Remote Code Execution
EoP Elevation of Privilege
ID Information Disclosure
DoS Denial of Service
N/A Classification not available

Version

Version Date Description
1.0 2024-01-12