CVE-2023-42749

In enginnermode service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-42749

CVE-2023-42749 affects the EngineerMode service in UNISOC chipsets. The vulnerability arises from a missing permission check in enginnermode, enabling an attacker with local access to write permission usage records and potentially disclose information. According to NVD metrics, it is a Local, Low...

CVE-2023-42740

In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2023-42739

CVE-2023-42739 affects the engineermode service, where a missing permission check could allow an app to write permission usage records. This enables local escalation of privilege with no extra execution privileges required. Documented impact is HIGH (CVSS v3.1: AV=L, AC=L, PR=L, UI=N, S=U, C=H, I...

CVE-2023-42740

CVE-2023-42740 - A missing permission check in the telecom service allows writing permission usage records, enabling local escalation of privilege without extra execution privileges. The issue is documented across multiple sources (NVD, Red Hat, PRION, CNNVD, etc.) and is associated with UNISOC t...

CVE-2023-42737

In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-42730

In IMS service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-42730

CVE-2023-42730 describes a vulnerability in the IMS service where a missing permission check allows writing permission usage records, enabling local information disclosure without extra privileges. The NVD entry lists a CVSS 3.1 base score of 5.5 (Medium) with Local attack vector, Low attack comp...

CVE-2023-42718

CVE-2023-42718 concerns the dialer module, where a missing permission check can allow an app to write permission usage records. The exposed root cause is inadequate access control in the dialer’s permission handling, enabling local information disclosure without additional execution privileges. T...

CVE-2023-42718

In dialer, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-42714

CVE-2023-42714 affects the firewall service and is discussed across multiple sources (NVD, Red Hat, CVE List, CNNVD). The root issue is a missing permission check that enables writing permission usage records for an app, leading to potential local information disclosure with no extra execution pr...

CVE-2023-42713

CVE-2023-42713 affects UNISOC chipsets’ firewall service, where a missing permission check enables an app to write permission usage records. Root cause: inadequate authorization on the firewall service, allowing local information disclosure without extra execution privileges. Impact: local inform...

CVE-2023-42711

The CVE-2023-42711 entry concerns a vulnerability in the firewall service where a missing permission check allows an app to write permission usage records, causing local information disclosure with no extra execution privileges required. Affected component: firewall service (general description a...

CVE-2023-42713

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-42707

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-42708

CVE-2023-42708 affects the firewall service, where a missing permission check could allow writing an app’s permission usage records, leading to local information disclosure without extra execution privileges. The issue is documented across multiple sources (NVD/Red Hat/PRion/CVE lists) and is ass...

CVE-2023-42709

CVE-2023-42709 affects UNISOC/chipset Firewall service where a missing permission check enables writing of an app’s permission usage records, leading to local information disclosure without extra privileges. Exploitation details are not provided in the connected documents; no concrete exploit vec...

CVE-2023-42704

CVE-2023-42704 affects imsservice in certain UNISOC-based environments. The root cause is a missing permission check that can allow an app to write permission usage records, enabling local information disclosure without requiring additional execution privileges. Reported impact aligns with NVD CV...

CVE-2023-42706

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-42704

In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...