• Security CVES
• High CVE-2022-27250

• CVE ID CVE-2022-27250
• Title Privilege Permission Leakage in One App
• Description

  Sprdautoslt lacks permission checks, resulting privilege escalation.

• Technology Area System
• Vulnerability Type CWE-862 Missing Authorization
• Access Vector Local
• CVSS Rating High
• CVSS Score 7.8
• CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RC:C
• Affected Chipsets*

  SC9863A/SC9832E/SC7731E/UMS512/UMS312/UMS9230/UMS9620

*The list of affected chipsets may not be complete. For latest information, device OEMs can contact directly at https://unisupport.unisoc.com

• Abbreviation Interpretation
• RCE Remote Code Execution
• EoP Elevation of Privilege
• ID Information Disclosure
• DoS Denial of Service
• N/A Classification not available

• Version Date Description
• 1.0 2022-04-04