Lucene search

UnisocCVE-2022-47465

HistoryApr 11, 2023 - 12:15 p.m.

CVE-2022-47465

2023-04-1112:15:07

CWE-476

Unisoc

web.nvd.nist.gov

cve-2022-47465

vdsp service

missing permission check

local denial of service

nvd

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.3

Confidence

High

EPSS

Percentile

5.1%

JSON

In vdsp service, there is a missing permission check. This could lead to local denial of service in vdsp service.

Affected configurations

Nvd

Node

googleandroidMatch10.0

googleandroidMatch11.0

googleandroidMatch12.0

googleandroidMatch13.0

AND

unisocs8000Match-

unisocsc7731eMatch-

unisocsc9832eMatch-

unisocsc9863aMatch-

unisoct310Match-

unisoct606Match-

unisoct610Match-

unisoct612Match-

unisoct616Match-

unisoct618Match-

unisoct760Match-

unisoct770Match-

unisoct820Match-

VendorProductVersionCPE
googleandroid13.0cpe:/o:google:android:13.0:::
googleandroid11.0cpe:/o:google:android:11.0:::
googleandroid12.0cpe:/o:google:android:12.0:::
googleandroid10.0cpe:/o:google:android:10.0:::

Vendor	Product	Version	CPE
google	android	13.0	cpe:/o:google:android:13.0:::
google	android	11.0	cpe:/o:google:android:11.0:::
google	android	12.0	cpe:/o:google:android:12.0:::
google	android	10.0	cpe:/o:google:android:10.0:::

CNA Affected

[
  {
    "vendor": "Unisoc (Shanghai) Technologies Co., Ltd.",
    "product": "SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000",
    "versions": [
      {
        "status": "affected",
        "version": "Android10/Android11/Android12/Android13"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.unisoc.com/en_us/secy/announcementDetail/1645429273135218690

Social References

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.3

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2022-47465