Local Denial of Service Vulnerability in Unisoc Telephony Service
CVE-2022-48447

5.5MEDIUM

Key Information:

Vendor

Unisoc (shanghai) Technologies Co., Ltd.

Status
Sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000
Vendor
CVE Published:
6 June 2023

What is CVE-2022-48447?

In the telephony service provided by Unisoc, a missing permission check has been identified, leading to a potential local denial of service. This vulnerability allows an attacker to disrupt the telephony functionalities without needing elevated privileges, emphasizing the need for stringent permission verification within the service.

Affected Version(s)

SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Android10/Android11/Android12

References

https://www.unisoc.com/en_us/secy/announcementDetail/1664...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.