Lucene search
UnisocCVE-2022-39118HistoryJan 04, 2023 - 10:15 a.m.
CVE-2022-39118
2023-01-0410:15:12
CWE-787
CWE-120
Unisoc
web.nvd.nist.gov
33
cve-2022-39118
sprd_sysdump
out of bounds write
denial of service
kernel security
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0
Percentile
5.1%
In sprd_sysdump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Affected configurations
Node
googleandroidMatch10.0
ORgoogleandroidMatch11.0
ORgoogleandroidMatch12.0
unisocs8000Match-
ORunisocsc7731eMatch-
ORunisocsc9832eMatch-
ORunisocsc9863aMatch-
ORunisoct310Match-
ORunisoct606Match-
ORunisoct610Match-
ORunisoct612Match-
ORunisoct616Match-
ORunisoct618Match-
ORunisoct760Match-
ORunisoct770Match-
ORunisoct820Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| android | 10.0 | cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:* | |
| android | 11.0 | cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:* | |
| android | 12.0 | cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:* | |
| unisoc | s8000 | - | cpe:2.3:h:unisoc:s8000:-:*:*:*:*:*:*:* |
| unisoc | sc7731e | - | cpe:2.3:h:unisoc:sc7731e:-:*:*:*:*:*:*:* |
| unisoc | sc9832e | - | cpe:2.3:h:unisoc:sc9832e:-:*:*:*:*:*:*:* |
| unisoc | sc9863a | - | cpe:2.3:h:unisoc:sc9863a:-:*:*:*:*:*:*:* |
| unisoc | t310 | - | cpe:2.3:h:unisoc:t310:-:*:*:*:*:*:*:* |
| unisoc | t606 | - | cpe:2.3:h:unisoc:t606:-:*:*:*:*:*:*:* |
| unisoc | t610 | - | cpe:2.3:h:unisoc:t610:-:*:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "Unisoc (Shanghai) Technologies Co., Ltd.",
"product": "SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000",
"versions": [
{
"version": "Android10/Android11/Android12",
"status": "affected"
}
]
}
]Related
cvelist
cvelist
CVE-2022-39118
2023-01-04 00:00:00
prion
prion
Out-of-bounds
2023-01-04 10:15:00
nvd
nvd
CVE-2022-39118
2023-01-04 10:15:12
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0
Percentile
5.1%
Related for CVE-2022-39118