CVE-2023-40632

2023-10-0803:35:58

Unisoc

github.com

logic error

use after free

remote information disclosure

AI Score

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

In jpg driver, there is a possible use after free due to a logic error. This could lead to remote information disclosure no additional execution privileges needed

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:h:unisoc:t606:-:*:*:*:*:*:*:*"
    ],
    "vendor": "unisoc",
    "product": "t606",
    "versions": [
      {
        "status": "affected",
        "version": "android13"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:2.3:h:unisoc:t612:-:*:*:*:*:*:*:*"
    ],
    "vendor": "unisoc",
    "product": "t612",
    "versions": [
      {
        "status": "affected",
        "version": "Android13"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:2.3:h:unisoc:t616:-:*:*:*:*:*:*:*"
    ],
    "vendor": "unisoc",
    "product": "t616",
    "versions": [
      {
        "status": "affected",
        "version": "Android13"
      }
    ],
    "defaultStatus": "unaffected"
  }
]