CVE-2023-42713

CVE-2023-42713 affects UNISOC chipsets’ firewall service, where a missing permission check enables an app to write permission usage records. Root cause: inadequate authorization on the firewall service, allowing local information disclosure without extra execution privileges. Impact: local inform...

CVE-2023-42711

The CVE-2023-42711 entry concerns a vulnerability in the firewall service where a missing permission check allows an app to write permission usage records, causing local information disclosure with no extra execution privileges required. Affected component: firewall service (general description a...

CVE-2023-42713

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-42708

CVE-2023-42708 affects the firewall service, where a missing permission check could allow writing an app’s permission usage records, leading to local information disclosure without extra execution privileges. The issue is documented across multiple sources (NVD/Red Hat/PRion/CVE lists) and is ass...

CVE-2023-42709

CVE-2023-42709 affects UNISOC/chipset Firewall service where a missing permission check enables writing of an app’s permission usage records, leading to local information disclosure without extra privileges. Exploitation details are not provided in the connected documents; no concrete exploit vec...

CVE-2023-42707

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-42704

CVE-2023-42704 affects imsservice in certain UNISOC-based environments. The root cause is a missing permission check that can allow an app to write permission usage records, enabling local information disclosure without requiring additional execution privileges. Reported impact aligns with NVD CV...

CVE-2023-42706

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-42704

In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-42700

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-42699

CVE-2023-42699 concerns the omacp service. A missing permission check could allow writing permission usage records for an app, enabling local information disclosure without additional execution privileges. Public sources summarize the issue and impact (local information disclosure) but do not pro...

CVE-2023-42699

In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-42698

CVE-2023-42698 affects the omacp service. A missing permission check could allow a local attacker to write an app’s permission usage records, causing local information disclosure (C: high). CVSSv3.1: 5.5 (MEDIUM), AV:L/AC:L/PR:L/UI:N/S:U. Exploitation details or affected product/version specifics...

CVE-2023-42697

CVE-2023-42697 affects the omacp service. A missing permission check could allow writing an app’s permission usage records, leading to local information disclosure with no additional execution privileges. The connected documents provide the issue and impact but do not specify exploitation status ...

CVE-2023-42677

The vulnerability CVE-2023-42677 affects imsservice. A missing permission check allows writing permission usage records for apps, exposing local information and impacting confidentiality without requiring additional privileges. Affected details across sources consistently describe information dis...

CVE-2023-42674

CVE-2023-42674 affects the IMS service (imsservice) in UNISOC chipsets. The vulnerability arises from a missing permission check that permits writing permission usage records for an app, enabling local information disclosure without requiring additional execution privileges. Multiple sources corr...

CVE-2023-42676

In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-42672

In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of privilege checking in the ims service, with a possible method to write a privilege usage log of an application...

PT-2023-28565 · Unisoc (Shanghai) Technologies Co. +1 · Sc7731E/Sc9832E/Sc9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: Telecom service affected versions not specified Description: The issue is related to a missing permission check, which could allow writing permission usage records of an app. This may lead to local information disclosure without requiring...