CVE-2022-39081: Improper Neutralization of Special Elements used in a Command

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed...

CVE-2022-39085: Improper Neutralization of Special Elements used in a Command

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed...

UNISOC chipset security vulnerabilities

UNISOC chipset is an integrated circuit chipset from China's Unisoc Corporation. A security vulnerability exists in the UNISOC chipset that stems from a lack of privilege checking in network services, which could lead to a local privilege escalation that requires system execution privileges...

CVE-2022-39081

CVE-2022-39081 describes a missing permission check in a network service that could enable local privilege escalation with System execution privileges required. The available connected documents corroborate the issue as a local-elevation flaw, but they do not provide concrete details on affected ...

CVE-2022-39086

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed...

CVE-2022-39081

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed...

PT-2023-13692 · Unisoc (Shanghai) Technologies Co. +1 · Sc9863A/Sc9832E/Sc7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to a missing permission check in a network service, which could lead to local escalation of privilege. System execution privileges are needed for this escalatio...

CVE-2022-39083

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed...

CVE-2022-39088

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed...

CVE-2022-39086

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed...

CVE-2022-32647

In ccu, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07554646; Issue ID: ALPS07554646...

CVE-2022-32650

In mtk-isp, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07225853; Issue ID: ALPS07225853...

CVE-2022-32651

In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07225857; Issue ID: ALPS07225857...

CVE-2022-32652

In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07262617; Issue ID: ALPS07262617...

CVE-2022-32658

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705059; Issue ID: GN20220705059...

CVE-2022-32659

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705066; Issue ID: GN20220705066...

CVE-2022-32651

In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07225857; Issue ID: ALPS07225857...

CVE-2022-32657

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705042; Issue ID: GN20220705042...

CVE-2022-32636

In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07510064; Issue ID: ALPS07510064...

CVE-2022-32637

In hevc decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07491374; Issue ID: ALPS07491374...