Summary

Security CVES
High CVE-2022-47469,CVE-2022-47470,CVE-2022-47486,CVE-2022-47487,CVE-2022-47488
Medium CVE-2022-44420,CVE-2022-44419,CVE-2022-48232,CVE-2022-48233,CVE-2022-48234,CVE-2022-47490,CVE-2022-47492,CVE-2022-47493,CVE-2022-48231,CVE-2022-47489,CVE-2022-47491,CVE-2022-47494,CVE-2022-47495,CVE-2022-47496,CVE-2022-47497,CVE-2022-47498,CVE-2022-47499,CVE-2022-48235,CVE-2022-48236,CVE-2022-48237,CVE-2022-48238,CVE-2022-48239,CVE-2022-48240,CVE-2022-48241,CVE-2022-48242,CVE-2022-48243,CVE-2022-48244,CVE-2022-48245,CVE-2022-48246,CVE-2022-48247,CVE-2022-48248,CVE-2022-48249,CVE-2022-48250,CVE-2022-48368,CVE-2022-48369,CVE-2022-48370,CVE-2022-48371,CVE-2022-48372,CVE-2022-48373,CVE-2022-48374,CVE-2022-48375,CVE-2022-48376,CVE-2022-48377,CVE-2022-48378,CVE-2022-48379,CVE-2022-47340,CVE-2022-48380,CVE-2022-48381,CVE-2022-48382,CVE-2022-48383,CVE-2022-48384,CVE-2022-48386,CVE-2022-48387,CVE-2022-38685,CVE-2022-39089,CVE-2022-48388,CVE-2022-44433,CVE-2022-48389,CVE-2022-47334,CVE-2022-47485

Minutia

CVE ID CVE-2022-44420
Title Missing Verification of HashMME value in Security Mode Command
Description
In modem, there is a possible missing verification of HashMME value in Security Mode Command. This could local denial of service with no additional execution privileges.
Technology Area Modem
Vulnerability Type CWE-400 Denial of Service
Access Vector Network
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-44419
Title Missing Verification of NAS Security Mode Command Replay Attacks in LTE
Description
In modem, there is a possible missing verification of NAS Security Mode Command Replay Attacks in LTE. This could local denial of service with no additional execution privileges.
Technology Area Modem
Vulnerability Type CWE-400 Denial of Service
Access Vector Network
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48232
Title Stack Overflow in FM service
Description
In FM service , there is a possible missing params check. This could lead to local denial of service in FM service .
Technology Area Android
Vulnerability Type CWE-121 Stack Overflow
Access Vector Local
CVSS Rating Medium
CVSS Score 4.4
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48233
Title Stack Overflow in FM service
Description
In FM service , there is a possible missing params check. This could lead to local denial of service in FM service .
Technology Area Android
Vulnerability Type CWE-121 Stack Overflow
Access Vector Local
CVSS Rating Medium
CVSS Score 4.4
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48234
Title Stack Overflow in FM service
Description
In FM service , there is a possible missing params check. This could lead to local denial of service in FM service .
Technology Area Android
Vulnerability Type CWE-121 Stack Overflow
Access Vector Local
CVSS Rating Medium
CVSS Score 4.4
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-47490
Title Missing Authorization in Soter service
Description
In soter service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-47492
Title Missing Authorization in Soter service
Description
In soter service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-47493
Title Missing Authorization in Soter service
Description
In soter service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48231
Title NULL Pointer Dereference in Soter service
Description
In soter service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-476 NULL Pointer Dereference
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-47489
Title Integer Overflow in Soter service
Description
In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-190 Integer Overflow
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-47491
Title Classic Buffer Overflow in Soter service
Description
In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-120 Classic Buffer Overflow
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-47494
Title Classic Buffer Overflow in Soter service
Description
In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-120 Classic Buffer Overflow
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-47495
Title Classic Buffer Overflow in Soter service
Description
In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-120 Classic Buffer Overflow
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-47496
Title Classic Buffer Overflow in Soter service
Description
In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-120 Classic Buffer Overflow
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-47497
Title Classic Buffer Overflow in Soter service
Description
In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-120 Classic Buffer Overflow
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-47498
Title Classic Buffer Overflow in Soter service
Description
In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-120 Classic Buffer Overflow
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-47499
Title Classic Buffer Overflow in Soter service
Description
In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-120 Classic Buffer Overflow
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48235
Title Out-of-bounds read in MP3 encoder
Description
In MP3 encoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-125 Out-of-bounds Read
Access Vector Local
CVSS Rating Medium
CVSS Score 4.4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48236
Title Out-of-bounds read in MP3 encoder
Description
In MP3 encoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-125 Out-of-bounds Read
Access Vector Local
CVSS Rating Medium
CVSS Score 4.4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48237
Title Classic Buffer Overflow in Image Filter
Description
In Image filter, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Kernel
Vulnerability Type CWE-120 Classic Buffer Overflow
Access Vector Local
CVSS Rating Medium
CVSS Score 4.4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48238
Title Classic Buffer Overflow in Image Filter
Description
In Image filter, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Kernel
Vulnerability Type CWE-125 Out-of-bounds Read
Access Vector Local
CVSS Rating Medium
CVSS Score 4.4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48239
Title Out-of-bounds Write in camera driver
Description
In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Kernel
Vulnerability Type CWE-787 Out-of-bounds Write
Access Vector Local
CVSS Rating Medium
CVSS Score 4.4
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48240
Title Out-of-bounds Write in camera driver
Description
In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Kernel
Vulnerability Type CWE-787 Out-of-bounds Write
Access Vector Local
CVSS Rating Medium
CVSS Score 4.4
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48241
Title NULL Pointer Dereference in telephony service
Description
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-476 NULL Pointer Dereference
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48242
Title Information Disclosure in telephony service
Description
In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-200 Information Disclosure
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48243
Title Missing Authorization in audio service
Description
In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Technology Area Audio
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48244
Title Missing Authorization in audio service
Description
In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Technology Area Audio
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48245
Title Missing Authorization in audio service
Description
In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Technology Area Audio
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48246
Title Missing Authorization in audio service
Description
In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Technology Area Audio
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48247
Title Missing Authorization in audio service
Description
In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Technology Area Audio
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48248
Title Missing Authorization in audio service
Description
In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Technology Area Audio
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48249
Title Missing Authorization in audio service
Description
In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Technology Area Audio
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48250
Title Missing Authorization in audio service
Description
In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Technology Area Audio
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48368
Title Missing Authorization in audio service
Description
In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Technology Area Audio
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48369
Title Missing Authorization in audio service
Description
In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Technology Area Audio
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48370
Title Information Disclosure in dialer service
Description
In dialer service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-200 Information Disclosure
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48371
Title Information Disclosure in dialer service
Description
In dialer service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-200 Information Disclosure
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48372
Title Integer overflow issue in bootcp service
Description
In bootcp service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-190 Integer Overflow
Access Vector Local
CVSS Rating Medium
CVSS Score 5.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48373
Title Integer overflow issue in tee service
Description
In tee service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-190 Integer Overflow
Access Vector Local
CVSS Rating Medium
CVSS Score 4.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48374
Title Integer overflow issue in tee service
Description
In tee service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-190 Integer Overflow
Access Vector Local
CVSS Rating Medium
CVSS Score 4.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48375
Title Missing Authorization in Contacts service
Description
In contacts service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 4.4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48376
Title Denial of Service in dialer
Description
In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48377
Title Denial of Service in dialer
Description
In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 6.2
CVSS String CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48378
Title Missing Authorization in Engineermode service
Description
In engineermode service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48379
Title NULL Pointer Dereference in dialer
Description
In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-476 NULL Pointer Dereference
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-47340
Title Stack Overflow in video decoder firmware
Description
In h265 codec firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-121 Out-of-bounds write
Access Vector Local
CVSS Rating Medium
CVSS Score 6.5
CVSS String CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48380
Title Denial of Service in modem control device
Description
In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Kernel
Vulnerability Type CWE-400 Denial of Service
Access Vector Local
CVSS Rating Medium
CVSS Score 6.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48381
Title Denial of Service in modem control device
Description
In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Kernel
Vulnerability Type CWE-400 Denial of Service
Access Vector Local
CVSS Rating Medium
CVSS Score 6.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48382
Title Classic Buffer Overflow in log service has buffer overflow issue
Description
In log service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-120 Classic Buffer Overflow
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48383
Title Missing Authorization in srtd service
Description
.In srtd service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48384
Title Missing Authorization in srtd service
Description
In srtd service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48386
Title Double Free in apipe driver
Description
the apipe driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-415 Double Free
Access Vector Local
CVSS Rating Medium
CVSS Score 5
CVSS String CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48387
Title Out-of-bounds Write in apipe driver
Description
the apipe driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-787 Out-of-bounds Write
Access Vector Local
CVSS Rating Medium
CVSS Score 5
CVSS String CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-38685
Title Denial of service in bluetooth service
Description
In bluetooth service, there is a possible missing permission check. This could lead to local denial of service in bluetooth service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-400 Uncontrolled Resource Consumption
Access Vector Local
CVSS Rating Medium
CVSS Score 5.5
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-39089
Title Classic Buffer Overflow in mlog service
Description
In mlog service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-120 Classic Buffer Overflow
Access Vector Local
CVSS Rating Medium
CVSS Score 4.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48388
Title Missing Authorization PowerEx service
Description
In powerEx service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 4.4
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-44433
Title Missing Authorization PhoneEx service
Description
In phoneEx service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 4.4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-48389
Title Stack Overflow in modem control device
Description
In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Kernel
Vulnerability Type CWE-121 Stack Overflow
Access Vector Local
CVSS Rating Medium
CVSS Score 6.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-47334
Title Out-of-bounds Read in phasecheck server
Description
In phasecheck server, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-125 Out-of-bounds Read
Access Vector Local
CVSS Rating Medium
CVSS Score 4.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-47485
Title Stack Overflow in phasecheck server
Description
In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Android
Vulnerability Type CWE-121 Stack Overflow
Access Vector Local
CVSS Rating Medium
CVSS Score 4.2
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-47469
Title Out-of-bounds Write read in ext4fsfilter driver
Description
In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could local denial of service with System execution privileges needed.
Technology Area Kernel
Vulnerability Type CWE-787 Out-of-bounds Write
Access Vector Local
CVSS Rating High
CVSS Score 7.2
CVSS String CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-47470
Title Stack Overflow in ext4fsfilter driver
Description
In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could local denial of service with System execution privileges needed.
Technology Area Kernel
Vulnerability Type CWE-121 Stack Overflow
Access Vector Local
CVSS Rating High
CVSS Score 7.2
CVSS String CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-47486
Title Stack Overflow in ext4fsfilter driver
Description
In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Kernel
Vulnerability Type CWE-121 Stack Overflow
Access Vector Local
CVSS Rating High
CVSS Score 7.2
CVSS String CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-47487
Title Buffer overflow in thermal service
Description
In thermal service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service local denial of service with no additional execution privileges.
Technology Area Android
Vulnerability Type CWE-120 Classic Buffer Overflow
Access Vector Local
CVSS Rating High
CVSS Score 7.7
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

CVE ID CVE-2022-47488
Title Improper Restriction of Operations within the Bounds of a Memory Buffer in spipe drive
Description
In spipe drive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area Kernel
Vulnerability Type CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
Access Vector Local
CVSS Rating High
CVSS Score 7.1
CVSS String CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Affected Chipsets*
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

*The list of affected chipsets may not be complete. For latest information, device OEMs can contact directly at https://unisupport.unisoc.com

Vulnerability type definition

Abbreviation Interpretation
RCE Remote Code Execution
EoP Elevation of Privilege
ID Information Disclosure
DoS Denial of Service
N/A Classification not available

Version

Version Date Description
1.0 2023-05-06