CVE-2022-38670

In soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed...

PT-2022-24519 · Unknown · Soundrecorder

Name of the Vulnerable Software and Affected Versions: soundrecorder service affected versions not specified Description: The issue is related to a missing permission check in the soundrecorder service. This could lead to elevation of privilege in the contacts service, and no additional execution...

CVE-2022-38688: Exposure of Sensitive Information to an Unauthorized Actor

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2022-39107: Missing Authorization

In Soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in Soundrecorder service with no additional execution privileges needed...

CVE-2022-38689

CVE-2022-38689 concerns the telephony service, where a missing permission check can enable local information disclosure without extra execution privileges. Multiple connected sources corroborate a local-privilege-agnostic disclosure vector affecting telephony components, with no concrete exploit ...

CVE-2022-38679

In music service, there is a missing permission check. This could lead to local denial of service in music service with no additional execution privileges needed...

CVE-2022-39108

In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed...

CVE-2022-39107

In Soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in Soundrecorder service with no additional execution privileges needed...

CVE-2022-39080

CVE-2022-39080 concerns a missing permission check in the messaging service that could allow elevation of privilege in the contacts service without extra execution privileges. Connected documents reference the issue in UNISOC chipset contexts (SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T618/T612...

CVE-2022-38689

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2022-39110

CVE-2022-39110 describes a missing permission check in the Music service that could allow elevation of privilege with no additional execution privileges required. The vulnerability is identified across multiple sources (NVD, Red Hat, CVE lists, PRION, CNNVD, etc.), all reiterating the same issue:...

CVE-2022-38698

CVE-2022-38698 involves a missing permission check in the messaging service that enables elevation of privilege in the contacts service. The vulnerability is exploitable locally with low privileges and does not require user interaction. The CVSSv3.1 metrics indicate a high impact on confidentiali...

CVE-2022-39113

In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed...

PT-2022-24729 · Unknown · Gallery Service

Name of the Vulnerable Software and Affected Versions: Gallery service affected versions not specified Description: The issue is related to a missing permission check in the Gallery service, which could lead to a local denial of service. This can be achieved without requiring additional execution...

CVE-2022-39113

The CVE-2022-39113 entry involves a missing permission check in the Music service that could allow local denial of service without extra privileges. Connected documents corroborate a local impact but do not provide concrete product/version details for the Music service itself. Some sources refere...

CVE-2022-38677

Summary (CVE-2022-38677) : Multiple sources describe a vulnerability in the cell service caused by a missing permission check, enabling local denial of service without requiring additional privileges. Reported impact is availability degradation; CVSSv3.1 base score ~5.5 (Medium) with local attack...

CVE-2022-39111

In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed...

CVE-2022-42488: Improper Authentication

OpenHarmony-v3.1.2 and prior versions have a Missing permission validation vulnerability in param service of startup subsystem. An malicious application installed on the device could elevate its privileges to the root user, disable security features, or cause DoS by disabling particular services...

CVE-2022-39110

In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed...

PT-2022-24734 · Unknown · Music Service

Name of the Vulnerable Software and Affected Versions: Music service affected versions not specified Description: The issue is related to a missing permission check in the Music service, which could lead to elevation of privilege. This can be exploited without needing additional execution...