PT-2023-13687 · Unisoc (Shanghai) Technologies Co. +1 · Sc9863A/Sc9832E/Sc7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned, use: affected versions not specified Description: The issue is related to a missing permission check in a network service, which could allow for local escalation of privilege. System execution...

CVE-2022-39082

CVE-2022-39082 describes a missing permission check in a network service leading to local privilege escalation requiring System execution privileges. Connected sources reference a UNISOC chipset context and confirm the local-access risk, with CVSSv3.1 metrics indicating Local access, privileges r...

CVE-2022-39082

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed...

PT-2023-13689 · Unisoc (Shanghai) Technologies Co. +1 · Sc9863A/Sc9832E/Sc7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: In a network service, there is a missing permission check. This could lead to local escalation of privilege, with System execution privileges needed. Recommendations: At the moment,...

PT-2023-13688 · Unisoc (Shanghai) Technologies Co. +1 · Sc9863A/Sc9832E/Sc7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: In a network service, there is a missing permission check. This could lead to local escalation of privilege, with System execution privileges needed...

PT-2023-13693 · Unisoc (Shanghai) Technologies Co. +1 · Sc9863A/Sc9832E/Sc7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a missing permission check in a network service, which could lead to local escalation of privilege. System execution privileges...

PT-2023-13694 · Unisoc (Shanghai) Technologies Co. +1 · Sc9863A/Sc9832E/Sc7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to a missing permission check in a network service, which could lead to local escalation of privilege. System execution privileges are needed for this escalatio...

CVE-2022-44434

CVE-2022-44434 affects a messaging service component and is caused by a missing permission check, enabling local denial of service in the contacts service with no extra privileges required. The vulnerability has a CVSS v3.1 base score of 5.5 (AV:L, AC:L, PR:L, UI:N, S:U, C:N, I:N, A:H), indicatin...

PT-2023-13626 · Unknown · Contacts Service

Name of the Vulnerable Software and Affected Versions: contacts service affected versions not specified Description: The issue is related to a missing permission check in the contacts service. This could lead to a local denial of service in the contacts service, and no additional execution...

PT-2023-14479 · Unisoc (Shanghai) Technologies Co. +1 · Sc9863A/Sc9832E/Sc7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: Messaging service affected versions not specified Description: The issue is related to a missing permission check in the messaging service, which could lead to a local denial of service in the contacts service. No additional execution...

CVE-2022-44423

In music service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed...

CVE-2022-44438

CVE-2022-44438 affects the Android messaging service (in Unisoc contexts) where a missing permission check can allow a local denial of service in the contacts service without extra privileges. Root cause: inadequate access control in the messaging component. Impact: local DoS as described in mult...

CVE-2022-39083

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed...

PT-2023-14464 · Unisoc (Shanghai) Technologies Co. +1 · Sc9863A/Sc9832E/Sc7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a missing permission check in the music service, which could lead to a local denial of service in the contacts service. No...

CVE-2022-38683

In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed...

CVE-2022-39087

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed...

ASB-A-246301995

In onActivityResult of AvatarPickerActivity.java, there is a possible way to access images belonging to other users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-229256049

In getMainActivityLaunchIntent of LauncherAppsService.java, there is a possible way to bypass the restrictions on starting activities from the background due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVE-2022-38655 HCL BigFix WebUI is affected by a missing-permission-check vulnerability

BigFix WebUI non-master operators are missing controls that prevent them from being able to modify the relevance of fixlets or to deploy fixlets from the BES Support external site...

CVE-2022-38655 HCL BigFix WebUI is affected by a missing-permission-check vulnerability

BigFix WebUI non-master operators are missing controls that prevent them from being able to modify the relevance of fixlets or to deploy fixlets from the BES Support external site...