CVE-2023-42748

In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2023-42747

In camera service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2023-42749

In enginnermode service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-42749

CVE-2023-42749 affects the EngineerMode service in UNISOC chipsets. The vulnerability arises from a missing permission check in enginnermode, enabling an attacker with local access to write permission usage records and potentially disclose information. According to NVD metrics, it is a Local, Low...

CVE-2023-42744

In telecom service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges needed...

CVE-2023-42745

Technical details (affected product/component/versions/root cause) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2023-42744

In telecom service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges needed...

CVE-2023-42743

In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2023-42745

In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2023-42746

In power manager, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2023-42746

CVE-2023-42746 is described as a local privilege-escalation due to a missing permission check in the power manager. The NVD entry notes local attack vector with low privileges required and no user interaction, and a high impact on confidentiality, integrity, and availability (CVSS 3.1 base score ...

CVE-2023-42743

CVE-2023-42743 involves a missing permission check in a telecom service, enabling local privilege escalation with no additional execution privileges needed. The connected sources indicate UNISOC chipsets are implicated, tying the issue to telecom functionality on those platforms. Documented impac...

CVE-2023-42744

CVE-2023-42744 concerns a missing permission check in a telecom service, enabling local denial of service without additional privileges. From NVD, the CVSSv3.1 base score is 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Exploitation details are not provided in the supplied documents, and no explicit...

CVE-2023-42742

In sysui, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges needed...

CVE-2023-42740

In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2023-42741

In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-42741

Summary (supported by provided documents): CVE-2023-42741 concerns a telecom service vulnerability, arising from a missing permission check that enables writing an app’s permission usage records. This can cause local information disclosure without additional execution privileges. Documents consis...

CVE-2023-42742

CVE-2023-42742 affects the sysui component (UNISOC chipsets). The root cause is a missing permission check, enabling a local denial‑of‑service with no additional execution privileges required. The documented impact is local DoS with high availability impact; exploitation status is not provided in...

CVE-2023-42739

In engineermode service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2023-42736

In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed...