CVE-2023-52345

2024-04-0802:21:15

Unisoc

github.com

modem driver

input validation

system crash

local information disclosure

system execution privileges needed

AI Score

6.6

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

In modem driver, there is a possible system crash due to improper input validation. This could lead to local information disclosure with System execution privileges needed

CNA Affected

[
  {
    "vendor": "Unisoc (Shanghai) Technologies Co., Ltd.",
    "product": "SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000",
    "versions": [
      {
        "status": "affected",
        "version": "Android12/Android13/Android14"
      }
    ],
    "defaultStatus": "unaffected"
  }
]