PT-2022-14459

Name of the Vulnerable Software and Affected Versions Android versions Android SoC Description The issue is related to an out-of-bounds oob problem in a drm driver, which could cause the system to crash or experience an elevation of privilege EOP. Recommendations For Android SoC, consider applyin...

CVE-2022-20238: Improper Restriction of Operations within the Bounds of a Memory Buffer

'remappfnrange' here may map out of size kernel memory for example, may map the kernel area, and because the 'vma-vmpageprot' can also be controlled by userspace, so userspace may map the kernel area to be writable, which is easy to be exploitedProduct: AndroidVersions: Android SoCAndroid ID:...

CVE-2022-20210

The UE and the EMM communicate with each other using NAS messages. When a new NAS message arrives from the EMM, the modem parses it and fills in internal objects based on the received data. A bug in the parsing code could be used by an attacker to remotely crash the modem, which could lead to DoS...

CVE-2022-20210

The UE and the EMM communicate with each other using NAS messages. When a new NAS message arrives from the EMM, the modem parses it and fills in internal objects based on the received data. A bug in the parsing code could be used by an attacker to remotely crash the modem, which could lead to DoS...

CVE-2022-20210: Undefined Security Weakness

The UE and the EMM communicate with each other using NAS messages. When a new NAS message arrives from the EMM, the modem parses it and fills in internal objects based on the received data. A bug in the parsing code could be used by an attacker to remotely crash the modem, which could lead to DoS...

CVE-2021-39635

imsex is a vendor system service used to manage VoLTE in unisoc devices，But it does not verify the caller's permissions，so that normal apps No phone permissions can obtain some VoLTE sensitive information and manage VoLTE calls.Product: AndroidVersions: Android SoCAndroid ID: A-206492634...

Code injection

imsex is a vendor system service used to manage VoLTE in unisoc devices?But it does not verify the caller's permissions?so that normal apps No phone permissions can obtain some VoLTE sensitive information and manage VoLTE calls.Product: AndroidVersions: Android SoCAndroid ID: A-206492634...

Design/Logic Flaw

ismsEx service is a vendor service in unisoc equipment?ismsEx service is an extension of sms system service?but it does not check the permissions of the caller?resulting in permission leaks?Third-party apps can use this service to arbitrarily modify and set system properties?Product:...

CVE-2021-39672

In fastboot, there is a possible secure boot bypass due to a configuration error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android SoC Android ID: A-202018701...

CVE-2021-39635

imsex is a vendor system service used to manage VoLTE in unisoc devices，But it does not verify the caller's permissions，so that normal apps No phone permissions can obtain some VoLTE sensitive information and manage VoLTE calls.Product: AndroidVersions: Android SoCAndroid ID: A-206492634...

CVE-2021-39658: Incorrect Default Permissions

ismsEx service is a vendor service in unisoc equipment。ismsEx service is an extension of sms system service，but it does not check the permissions of the caller，resulting in permission leaks。Third-party apps can use this service to arbitrarily modify and set system properties。Product:...

CVE-2021-39635: Incorrect Default Permissions

imsex is a vendor system service used to manage VoLTE in unisoc devices，But it does not verify the caller's permissions，so that normal apps No phone permissions can obtain some VoLTE sensitive information and manage VoLTE calls.Product: AndroidVersions: Android SoCAndroid ID: A-206492634...

CVE-2021-39616: Undefined Security Weakness

Summary:Product: AndroidVersions: Android SoCAndroid ID: A-204686438...

PT-2022-10924

Name of the Vulnerable Software and Affected Versions Android SoC versions affected versions not specified Description The issue concerns Android SoC. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where...

Design/Logic Flaw

Hacker one bug ID: 1343975Product: AndroidVersions: Android SoCAndroid ID: A-204256722...

CVE-2021-1049

Hacker one bug ID: 1343975Product: AndroidVersions: Android SoCAndroid ID: A-204256722...

PT-2022-9145

Name of the Vulnerable Software and Affected Versions Android SoC affected versions not specified Description A bug has been identified in Android SoC, with a HackerOne bug ID of 1343975 and an Android ID of A-204256722. Recommendations At the moment, there is no information about a newer version...

CVE-2021-1049: Undefined Security Weakness

Hacker one bug ID: 1343975Product: AndroidVersions: Android SoCAndroid ID: A-204256722...

PT-2021-13348

Name of the Vulnerable Software and Affected Versions Android SoC versions affected versions not specified Description The issue is related to an insecure permission setting in SRAMROM, which could lead to a permission bypass. This might result in local escalation of privilege, requiring System...

CVE-2021-0672

In Browser app, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-19967803...