deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-28764
Published: 2023-05-09
Description: SAP BusinessObjects Platform - versions 420, 430, Information design tool transmits sensitive information as cleartext in the binaries over the network. This could allow an unauthenticated attacker with deep knowledge to gain sensitive information such as user credentials and domain names, which may have a low impact on confidentiality and no impact on the integrity and availability of the system.


CVSS Score: 3.7 (LOW)
CWE: CWE-522
References: https://i7p.wdf.sap.corp/sap/support/notes/3302595; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://i7p.wdf.sap.corp/sap/support/notes/3302595
CVE: CVE-2023-29188
Published: 2023-05-09
Description: SAP CRM WebClient UI - versions SAPSCORE 129, S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, WEBCUIF 701, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WEBCUIF 748, WEBCUIF 800, WEBCUIF 801, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker with user level access can read and modify some sensitive information but cannot delete the data.


CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://i7p.wdf.sap.corp/sap/support/notes/3315979; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://i7p.wdf.sap.corp/sap/support/notes/3315979
CVE: CVE-2021-31239
Published: 2023-05-09
Description: An issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial of service via the appendvfs.c function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://github.com/Tsiming/Vulnerabilities/blob/main/SQLite/CVE-2021-31239; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/73XUIHJ6UT75VFPDPLJOXJON7MVIKVZI/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FXFL4TDAH72PRCPD5UPZMJMKIMVOPLTI/
CVE: CVE-2022-38685
Published: 2023-05-09
Description: In bluetooth service, there is a possible missing permission check. This could lead to local denial of service in bluetooth service with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-39089
Published: 2023-05-09
Description: In mlog service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-44419
Published: 2023-05-09
Description: In modem, there is a possible missing verification of NAS Security Mode Command Replay Attacks in LTE. This could local denial of service with no additional execution privileges.
CVSS Score: 5.5 (MEDIUM)
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-44420
Published: 2023-05-09
Description: In modem, there is a possible missing verification of HashMME value in Security Mode Command. This could local denial of service with no additional execution privileges.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-345
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-44433
Published: 2023-05-09
Description: In phoneEx service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-47334
Published: 2023-05-09
Description: In phasecheck server, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-47340
Published: 2023-05-09
Description: In h265 codec firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-47469
Published: 2023-05-09
Description: In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-47470
Published: 2023-05-09
Description: In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-47485
Published: 2023-05-09
Description: In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-47486
Published: 2023-05-09
Description: In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-47487
Published: 2023-05-09
Description: In thermal service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service local denial of service with no additional execution privileges.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-47488
Published: 2023-05-09
Description: In spipe drive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-119
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-47489
Published: 2023-05-09
Description: In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-47490
Published: 2023-05-09
Description: In soter service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-47491
Published: 2023-05-09
Description: In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-47492
Published: 2023-05-09
Description: In soter service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-47493
Published: 2023-05-09
Description: In soter service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-47494
Published: 2023-05-09
Description: In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-47495
Published: 2023-05-09
Description: In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-47496
Published: 2023-05-09
Description: In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-47497
Published: 2023-05-09
Description: In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-47498
Published: 2023-05-09
Description: In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-47499
Published: 2023-05-09
Description: In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-48231
Published: 2023-05-09
Description: In soter service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-48232
Published: 2023-05-09
Description: In FM service , there is a possible missing params check. This could lead to local denial of service in FM service .
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-48233
Published: 2023-05-09
Description: In FM service , there is a possible missing params check. This could lead to local denial of service in FM service .
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-48234
Published: 2023-05-09
Description: In FM service , there is a possible missing params check. This could lead to local denial of service in FM service .
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-48235
Published: 2023-05-09
Description: In MP3 encoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-48236
Published: 2023-05-09
Description: In MP3 encoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-48237
Published: 2023-05-09
Description: In Image filter, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-48238
Published: 2023-05-09
Description: In Image filter, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-48239
Published: 2023-05-09
Description: In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-48240
Published: 2023-05-09
Description: In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-48241
Published: 2023-05-09
Description: In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-48242
Published: 2023-05-09
Description: In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-48243
Published: 2023-05-09
Description: In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-48244
Published: 2023-05-09
Description: In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-48245
Published: 2023-05-09
Description: In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-48246
Published: 2023-05-09
Description: In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-48247
Published: 2023-05-09
Description: In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-48248
Published: 2023-05-09
Description: In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-48249
Published: 2023-05-09
Description: In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-48250
Published: 2023-05-09
Description: In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-48368
Published: 2023-05-09
Description: In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-48369
Published: 2023-05-09
Description: In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-48370
Published: 2023-05-09
Description: In dialer service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-48371
Published: 2023-05-09
Description: In dialer service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-48372
Published: 2023-05-09
Description: In bootcp service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-48373
Published: 2023-05-09
Description: In tee service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-48374
Published: 2023-05-09
Description: In tee service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761
CVE: CVE-2022-48375
Published: 2023-05-09
Description: In contacts service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]82133761