CVE-2022-47352

In camera driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

CVSS v3 4.4 MEDIUM

4.4^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434	Broken Link

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:google:android:11.0:-::::::
	cpe:2.3:o:google:android:12.0:-::::::
	cpe:2.3:o:google:android:13.0:-::::::

OR	cpe:2.3:h:unisoc:t610:-:::::::*
	cpe:2.3:h:unisoc:t618:-:::::::*

History

06 Sep 2023, 20:30

Type	Values Removed	Values Added
References	~~(MISC) https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434 -~~	(MISC) https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434 - Broken Link
CWE		CWE-125
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 4.4
CPE		cpe:2.3:h:unisoc:t618:-:::::::* cpe:2.3:h:unisoc:t610:-:::::::* cpe:2.3:o:google:android:11.0:-:::::: cpe:2.3:o:google:android:13.0:-:::::: cpe:2.3:o:google:android:12.0:-::::::
First Time		Unisoc t618 Google Unisoc t610 Unisoc Google android

04 Sep 2023, 03:51

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-09-04 02:15

Updated : 2024-02-28 20:33

NVD link : CVE-2022-47352

Mitre link : CVE-2022-47352

CVE.ORG link : CVE-2022-47352

JSON object : View

Products Affected

unisoc

t618
t610

google

android

CWE

CWE-125

Out-of-bounds Read

{"id": "CVE-2022-47352", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 0.8}]}, "published": "2023-09-04T02:15:07.697", "references": [{"url": "https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434", "tags": ["Broken Link"], "source": "security@unisoc.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-125"}]}], "descriptions": [{"lang": "en", "value": "In camera driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed"}, {"lang": "es", "value": "En camera driver, se presenta una posible lectura fuera de l\u00edmites debido a una falta de comprobaci\u00f3n de l\u00edmites. Esto podr\u00eda conllevar a una denegaci\u00f3n de servicio local con los privilegios de ejecuci\u00f3n System necesarios."}], "lastModified": "2023-09-06T20:30:38.280", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:google:android:11.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F120D280-287A-474F-9DC5-CBBC4B4C7237"}, {"criteria": "cpe:2.3:o:google:android:12.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "16820CAF-0A8A-45C8-B5A8-979EA0407389"}, {"criteria": "cpe:2.3:o:google:android:13.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "08A26AC2-409E-499A-B0D5-8C2B5038947D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:unisoc:t610:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CDC980D6-B797-4AE1-B553-35395AE80D07"}, {"criteria": "cpe:2.3:h:unisoc:t618:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "39002ECE-636A-4FEB-9A0B-8127E8AAC844"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "security@unisoc.com"}