CVE-2022-48385

2023-05-0901:21:29

Unisoc

www.cve.org

cp_dump driver

out of bounds write

vulnerability

denial of service

system execution privileges

AI Score

5.1

Confidence

High

EPSS

Percentile

5.1%

JSON

In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

CNA Affected

[
  {
    "vendor": "Unisoc (Shanghai) Technologies Co., Ltd.",
    "product": "SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000",
    "versions": [
      {
        "status": "affected",
        "version": "Android11/Android12"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761