deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-41580
Published: 2022-10-14
Description: The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-125
References: https://consumer.huawei.com/en/support/bulletin/2022/10/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/10/
CVE: CVE-2022-41581
Published: 2022-10-14
Description: The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://consumer.huawei.com/en/support/bulletin/2022/10/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/10/
CVE: CVE-2022-41582
Published: 2022-10-14
Description: The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-15
References: https://consumer.huawei.com/en/support/bulletin/2022/10/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/10/
CVE: CVE-2022-41583
Published: 2022-10-14
Description: The storage maintenance and debugging module has an array out-of-bounds read vulnerability.Successful exploitation of this vulnerability will cause incorrect statistics of this module.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://consumer.huawei.com/en/support/bulletin/2022/10/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/10/
CVE: CVE-2022-41584
Published: 2022-10-14
Description: The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://consumer.huawei.com/en/support/bulletin/2022/10/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/10/
CVE: CVE-2022-41585
Published: 2022-10-14
Description: The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://consumer.huawei.com/en/support/bulletin/2022/10/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/10/
CVE: CVE-2022-41586
Published: 2022-10-14
Description: The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affect data confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-130
References: https://consumer.huawei.com/en/support/bulletin/2022/10/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/10/
CVE: CVE-2022-41587
Published: 2022-10-14
Description: Uncaptured exceptions in the home screen module. Successful exploitation of this vulnerability may affect stability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-754, CWE-754
References: https://consumer.huawei.com/en/support/bulletin/2022/10/; https://consumer.huawei.com/en/support/bulletin/2022/10/
CVE: CVE-2022-41588
Published: 2022-10-14
Description: The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integrity.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1264
References: https://consumer.huawei.com/en/support/bulletin/2022/10/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/10/
CVE: CVE-2022-41589
Published: 2022-10-14
Description: The DFX unwind stack module of the ArkCompiler has a vulnerability in interface calling.Successful exploitation of this vulnerability affects system services and device availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-703
References: https://consumer.huawei.com/en/support/bulletin/2022/10/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/10/
CVE: CVE-2022-41592
Published: 2022-10-14
Description: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.
CVSS Score: 3.4 (LOW)
CWE: CWE-125, CWE-476, CWE-787, CWE-125, CWE-476
References: https://consumer.huawei.com/en/support/bulletin/2022/10/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/10/
CVE: CVE-2022-41593
Published: 2022-10-14
Description: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.
CVSS Score: 3.4 (LOW)
CWE: CWE-125, CWE-476, CWE-787, CWE-125, CWE-476
References: https://consumer.huawei.com/en/support/bulletin/2022/10/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/10/
CVE: CVE-2022-41594
Published: 2022-10-14
Description: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.
CVSS Score: 3.4 (LOW)
CWE: CWE-125, CWE-476, CWE-787, CWE-476
References: https://consumer.huawei.com/en/support/bulletin/2022/10/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/10/
CVE: CVE-2022-41595
Published: 2022-10-14
Description: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.
CVSS Score: 3.4 (LOW)
CWE: CWE-125, CWE-476, CWE-787, CWE-125, CWE-476
References: https://consumer.huawei.com/en/support/bulletin/2022/10/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/10/
CVE: CVE-2022-41597
Published: 2022-10-14
Description: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.
CVSS Score: 3.4 (LOW)
CWE: CWE-125, CWE-476, CWE-787, CWE-125, CWE-476
References: https://consumer.huawei.com/en/support/bulletin/2022/10/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/10/
CVE: CVE-2022-41598
Published: 2022-10-14
Description: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.
CVSS Score: 3.4 (LOW)
CWE: CWE-125, CWE-476, CWE-787, CWE-125, CWE-476
References: https://consumer.huawei.com/en/support/bulletin/2022/10/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/10/
CVE: CVE-2022-41600
Published: 2022-10-14
Description: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.
CVSS Score: 3.4 (LOW)
CWE: CWE-125, CWE-476, CWE-787, CWE-125
References: https://consumer.huawei.com/en/support/bulletin/2022/10/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/10/
CVE: CVE-2022-41601
Published: 2022-10-14
Description: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.
CVSS Score: 3.4 (LOW)
CWE: CWE-125, CWE-476, CWE-787, CWE-125
References: https://consumer.huawei.com/en/support/bulletin/2022/10/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/10/
CVE: CVE-2022-41602
Published: 2022-10-14
Description: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.
CVSS Score: 3.4 (LOW)
CWE: CWE-125, CWE-476, CWE-787
References: https://consumer.huawei.com/en/support/bulletin/2022/10/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/10/
CVE: CVE-2022-41603
Published: 2022-10-14
Description: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.
CVSS Score: 3.4 (LOW)
CWE: CWE-125, CWE-476, CWE-787, CWE-125, CWE-476
References: https://consumer.huawei.com/en/support/bulletin/2022/10/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/10/
CVE: CVE-2022-42067
Published: 2022-10-14
Description: Online Birth Certificate Management System version 1.0 suffers from an Insecure Direct Object Reference (IDOR) vulnerability
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://packetstormsecurity.com/files/168524/Online-Birth-Certificate-Management-System-1.0-Insecure-Direct-Object-Reference.html; https://www.sourcecodester.com/php/15683/online-birth-certificate-management-system-php-free-download.html; https://packetstormsecurity.com/files/168524/Online-Birth-Certificate-Management-System-1.0-Insecure-Direct-Object-Reference.html
CVE: CVE-2021-0699
Published: 2022-10-14
Description: In HTBLogKM of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-242345178
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/2022-10-01; https://source.android.com/security/bulletin/2022-10-01
CVE: CVE-2021-22685
Published: 2022-10-14
Description: An attacker may be able to use minify route with a relative path to view any file on the Cassia Networks Access Controller prior to 2.0.1.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://www.cassianetworks.com/support/knowledge-base/; https://www.cisa.gov/uscert/ics/advisories/icsa-21-119-02; https://www.cassianetworks.com/support/knowledge-base/
CVE: CVE-2021-27406
Published: 2022-10-14
Description: An attacker can take leverage on PerFact OpenVPN-Client versions 1.4.1.0 and prior to send the config command from any application running on the local host machine to force the back-end server into initializing a new open-VPN instance with arbitrary open-VPN configuration. This could result in the attacker achieving execution with privileges of a SYSTEM user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-15, CWE-610
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-056-01; https://www.cisa.gov/uscert/ics/advisories/icsa-21-056-01
CVE: CVE-2022-20397
Published: 2022-10-14
Description: In SitRilClient_OnResponse of SitRilSe.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-223086933References: N/A
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-10-01; https://source.android.com/security/bulletin/pixel/2022-10-01
CVE: CVE-2022-20464
Published: 2022-10-14
Description: In various functions of ap_input_processor.c, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-236042696References: N/A
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-693
References: https://source.android.com/security/bulletin/pixel/2022-10-01; https://source.android.com/security/bulletin/pixel/2022-10-01
CVE: CVE-2022-3479
Published: 2022-10-14
Description: A vulnerability found in nss. By this security vulnerability, nss client auth crash without a user certificate in the database and this can lead us to a segmentation fault or crash.
CVSS Score: 7.5 (HIGH)
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1774654; https://bugzilla.redhat.com/show_bug.cgi?id=2134331; https://security.gentoo.org/glsa/202212-05
CVE: CVE-2022-41302
Published: 2022-10-14
Description: An Out-Of-Bounds Read Vulnerability in Autodesk FBX SDK version 2020. and prior may lead to code execution or information disclosure through maliciously crafted FBX files. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0022; https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0022
CVE: CVE-2022-41303
Published: 2022-10-14
Description: A user may be tricked into opening a malicious FBX file which may exploit a use-after-free vulnerability in Autodesk FBX SDK 2020 version causing the application to reference a memory location controlled by an unauthorized third party, thereby running arbitrary code on the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0022; https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0022
CVE: CVE-2022-41304
Published: 2022-10-14
Description: An Out-Of-Bounds Write Vulnerability in Autodesk FBX SDK 2020 version and prior may lead to code execution through maliciously crafted FBX files or information disclosure.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0022; https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0022
CVE: CVE-2022-41305
Published: 2022-10-14
Description: A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0019; https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0019
CVE: CVE-2022-41306
Published: 2022-10-14
Description: A maliciously crafted PCT file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0022; https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0022
CVE: CVE-2022-41307
Published: 2022-10-14
Description: A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0020; https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0020
CVE: CVE-2022-41308
Published: 2022-10-14
Description: A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0021; https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0021
CVE: CVE-2022-42232
Published: 2022-10-14
Description: Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/classes/Master.php?f=delete_storage.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/debug601/bug_report/blob/main/vendors/oretnom23/simple-cold-storage-management-system/SQLi-1.md; https://github.com/debug601/bug_report/blob/main/vendors/oretnom23/simple-cold-storage-management-system/SQLi-1.md
CVE: CVE-2022-42234
Published: 2022-10-14
Description: There is a file inclusion vulnerability in the template management module in UCMS 1.6
CVSS Score: 8.8 (HIGH)
CWE: CWE-552, CWE-552
References: https://github.com/luoyangchangan/bug/issues/1; https://github.com/luoyangchangan/bug/issues/1
CVE: CVE-2022-2850
Published: 2022-10-14
Description: A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. This CVE is assigned against an incomplete fix of CVE-2021-3514.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://access.redhat.com/security/cve/CVE-2022-2850; https://bugzilla.redhat.com/show_bug.cgi?id=2118691; https://lists.debian.org/debian-lts-announce/2023/04/msg00026.html
CVE: CVE-2022-2963
Published: 2022-10-14
Description: A vulnerability found in jasper. This security vulnerability happens because of a memory leak bug in function cmdopts_parse that can cause a crash or segmentation fault.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401, CWE-401
References: https://access.redhat.com/security/cve/CVE-2022-2963; https://bugzilla.redhat.com/show_bug.cgi?id=2118587; https://github.com/jasper-software/jasper/issues/332
CVE: CVE-2022-2984
Published: 2022-10-14
Description: In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-2985
Published: 2022-10-14
Description: In music service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-38669
Published: 2022-10-14
Description: In soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-38670
Published: 2022-10-14
Description: In soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-38671
Published: 2022-10-14
Description: In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-126, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-38672
Published: 2022-10-14
Description: In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-38673
Published: 2022-10-14
Description: In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-126, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-38676
Published: 2022-10-14
Description: In gpu driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-38677
Published: 2022-10-14
Description: In cell service, there is a missing permission check. This could lead to local denial of service in cell service with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-38679
Published: 2022-10-14
Description: In music service, there is a missing permission check. This could lead to local denial of service in music service with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738
CVE: CVE-2022-38687
Published: 2022-10-14
Description: In messaging service, there is a missing permission check. This could lead to local denial of service in messaging service with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]20020738