Summary

Security CVES
Medium CVE-2023-42631,CVE-2023-42632,CVE-2023-42633,CVE-2023-42634,CVE-2023-42635,CVE-2023-42636,CVE-2023-42637,CVE-2023-42638,CVE-2023-42639,CVE-2023-42640,CVE-2023-42641,CVE-2023-42642,CVE-2023-42643,CVE-2023-42644,CVE-2023-42645,CVE-2023-42646,CVE-2023-42647,CVE-2023-42648,CVE-2023-42649,CVE-2023-42650,CVE-2023-42651,CVE-2023-42652,CVE-2023-42653,CVE-2023-42750,CVE-2022-48460,CVE-2023-42654,CVE-2023-42655

Minutia

CVE ID CVE-2023-42631
Title Exposure of Sensitive Information to an Unauthorized Actor in validationtools
Description
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42632
Title Exposure of Sensitive Information to an Unauthorized Actor in validationtools
Description
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42633
Title Exposure of Sensitive Information to an Unauthorized Actor in validationtools
Description
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42634
Title Exposure of Sensitive Information to an Unauthorized Actor in validationtools
Description
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42635
Title Exposure of Sensitive Information to an Unauthorized Actor in validationtools
Description
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42636
Title Exposure of Sensitive Information to an Unauthorized Actor in validationtools
Description
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42637
Title Exposure of Sensitive Information to an Unauthorized Actor in validationtools
Description
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42638
Title Exposure of Sensitive Information to an Unauthorized Actor in validationtools
Description
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42639
Title Exposure of Sensitive Information to an Unauthorized Actor in validationtools
Description
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42640
Title Exposure of Sensitive Information to an Unauthorized Actor in validationtools
Description
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42641
Title Exposure of Sensitive Information to an Unauthorized Actor in validationtools
Description
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42642
Title Exposure of Sensitive Information to an Unauthorized Actor in validationtools
Description
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42643
Title Exposure of Sensitive Information to an Unauthorized Actor in validationtools
Description
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42644
Title Exposure of Sensitive Information to an Unauthorized Actor in dm service
Description
In dm service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42645
Title Exposure of Sensitive Information to an Unauthorized Actor in sim service
Description
In sim service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
T760/T770/T820/S8000

CVE ID CVE-2023-42646
Title Exposure of Sensitive Information to an Unauthorized Actor in Ifaa service
Description
In Ifaa service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42647
Title Exposure of Sensitive Information to an Unauthorized Actor in Ifaa service
Description
In Ifaa service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42648
Title Exposure of Sensitive Information to an Unauthorized Actor in engineermode
Description
In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42649
Title Exposure of Sensitive Information to an Unauthorized Actor in engineermode
Description
In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42650
Title Exposure of Sensitive Information to an Unauthorized Actor in engineermode
Description
In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42651
Title Exposure of Sensitive Information to an Unauthorized Actor in engineermode
Description
In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42652
Title Missing Authorization in engineermode
Description
In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42653
Title Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in faceid service
Description
In faceid service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges
Technology Area Android
Vulnerability Type cwe-787 Out-of-bounds Write
Access Vector Local
CVSS Rating Medium
CVSS Score 4.4
CVSS String CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42750
Title Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in gnss service
Description
In gnss service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Technology Area WCN
Vulnerability Type cwe-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Access Vector Local
CVSS Rating Medium
CVSS Score 5.9
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2022-48460
Title Missing Authorization in setting service
Description
In setting service, there is a possible undefined behavior due to incorrect error handling. This could lead to local denial of service with no additional execution privileges needed.
Technology Area Android
Vulnerability Type cwe-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618

CVE ID CVE-2023-42654
Title Exposure of Sensitive Information to an Unauthorized Actor in dm service
Description
In dm service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Technology Area Android
Vulnerability Type CWE-200Exposureof Sensitive Information to anUnauthorizedActor
Access Vector Local
CVSS Rating Medium
CVSS Score 4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Chipsets*
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000

CVE ID CVE-2023-42655
Title Missing Authorization in sim service
Description
In sim service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed.
Technology Area Android
Vulnerability Type cwe-862 Missing Authorization
Access Vector Local
CVSS Rating Medium
CVSS Score 4.4
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Affected Chipsets*
T760/T770/T820/S8000

*The list of affected chipsets may not be complete. For latest information, device OEMs can contact directly at https://unisupport.unisoc.com

Vulnerability type definition

Abbreviation Interpretation
RCE Remote Code Execution
EoP Elevation of Privilege
ID Information Disclosure
DoS Denial of Service
N/A Classification not available

Version

Version Date Description
1.0 2023-11-01