CVE-2022-47341

In engineermode services, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed...

CVE-2022-47339

In cmd services, there is a OS command injection issue due to missing permission check. This could lead to local escalation of privilege with system execution privileges needed...

Command injection

In cmd services, there is a OS command injection issue due to missing permission check. This could lead to local escalation of privilege with system execution privileges needed...

EulerOS 2.0 SP8 : kernel (EulerOS-SA-2023-1347)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In veritytarget of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check. This could lead to...

CVE-2023-20616

In ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07560720; Issue ID: ALPS07560720...

CVE-2023-20612

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629571; Issue ID: ALPS07629571...

CVE-2023-20602

In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494107; Issue ID: ALPS07494107...

CVE-2023-20604

In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494067; Issue ID: ALPS07494067...

CVE-2023-20613

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628614; Issue ID: ALPS07628614...

CVE-2023-20607

In ccu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07512839; Issue ID: ALPS07512839...

Race condition

In ccu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07512839; Issue ID: ALPS07512839...

Out-of-bounds

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629572; Issue ID: ALPS07629572...

Out-of-bounds

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628615; Issue ID: ALPS07628615...

CVE-2022-47341

The CVE-2022-47341 entry describes a vulnerability in engineermode services with a missing permission check that could allow local escalation of privilege to system execution privileges. Affected component: engineermode services. Root cause: inadequate permission validation leading to privilege e...

CVE-2022-47341

In engineermode services, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed...

CVE-2022-47339

CVE-2022-47339 describes a local OS command injection in the cmd_services component due to missing permission checks, enabling local privilege escalation to a root/system level on affected Unisoc/Android devices. The CVSS vector indicates LOCAL access, low attack complexity, but HIGH privileges r...

CVE-2023-20614

CVE-2023-20614 affects MediaTek devices in the ril component, where a missing bounds check allows an out-of-bounds write that can escalate to SYSTEM level privileges locally without user interaction. The root cause is a bounds-check omission in ril, enabling a write beyond intended memory. The vu...

CVE-2023-20619

In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07519159; Issue ID: ALPS07519159...

CVE-2023-20619

The CVE-2023-20619 entry concerns the vcu component, with a memory corruption issue caused by improper locking. The vulnerability enables local escalation of privileges to System execution level and does not require user interaction. A patch is identified as ALPS07519159 (Issue ALPS07519159). Pub...

CVE-2023-20615

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629572; Issue ID: ALPS07629572...