CVE-2022-39113

In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed...

CVE-2022-42488: Improper Authentication

OpenHarmony-v3.1.2 and prior versions have a Missing permission validation vulnerability in param service of startup subsystem. An malicious application installed on the device could elevate its privileges to the root user, disable security features, or cause DoS by disabling particular services...

CVE-2022-39110

In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed...

PT-2022-24734 · Unknown · Music Service

Name of the Vulnerable Software and Affected Versions: Music service affected versions not specified Description: The issue is related to a missing permission check in the Music service, which could lead to elevation of privilege. This can be exploited without needing additional execution...

CVE-2022-39114

CVE-2022-39114 describes a missing permission check in the Music service that can lead to a local denial of service without requiring additional execution privileges. The NVD entry assigns a CVSS v3.1 base score of 5.5 (Local, Low attack complexity, Low privileges required, Availability impact), ...

PT-2022-19876

Name of the Vulnerable Software and Affected Versions music service affected versions not specified Description The issue is related to a missing permission check in the music service, which could lead to elevation of privilege in the contacts service. This can be achieved without needing any...

PT-2022-24517

Name of the Vulnerable Software and Affected Versions soundrecorder affected versions not specified Description The issue is related to a missing permission check in the soundrecorder service. This could potentially lead to elevation of privilege in the contacts service, and it does not require a...

CVE-2022-39080

In messaging service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed...

CVE-2022-38669

CVE-2022-38669 describes a privilege-escalation issue in the soundrecorder service that lacks a required permission check, enabling elevation of privilege in the contacts service without extra execution privileges. Multiple sources (NVD, Red Hat, OSV) corroborate the core flaw and its local attac...

CVE-2022-39114

In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed...

PT-2022-24741 · Unisoc (Shanghai) Technologies Co. +1 · Sc9863A/Sc9832E/Sc7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a missing permission check in a messaging service, which could lead to local information disclosure without requiring additional...

CVE-2022-39080: Missing Authorization

In messaging service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed...

PT-2022-24737 · Unknown · Music Service

Name of the Vulnerable Software and Affected Versions: Music service affected versions not specified Description: The issue is related to a missing permission check in the Music service, which could lead to a local denial of service with no additional execution privileges needed. Recommendations:...

CVE-2022-39115

CVE-2022-39115 relates to a missing permission check in the Music service, allowing a local attacker to cause a denial of service without extra privileges. Affected component is the Music service; root cause is insufficient authorization before performing sensitive actions. Impact stated as local...

CVE-2022-39114: Missing Authorization

In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed...

CVE-2022-39110: Missing Authorization

In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed...

PT-2022-24740 · Unknown · Music Service

Name of the Vulnerable Software and Affected Versions: Music service affected versions not specified Description: The issue is related to a missing permission check in the Music service, which could lead to a local denial of service with no additional execution privileges needed. Recommendations:...

CVE-2022-39115

In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed...

CVE-2022-20394

In getInputMethodWindowVisibleHeight of InputMethodManagerService.java, there is a possible way to determine when another app is showing an IME due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is...

Authorization

There is an missing authorization issue in the system service. Since the component does not have permission check , resulting in Local Elevation of privilege.Product: AndroidVersions: Android SoCAndroid ID: A-242221238...