CVE-2022-38673 | ByteOS Network

Vulnerability Details :

CVE-2022-38673

Assigner-Unisoc

Assigner Org ID-63f92e9c-2193-4c24-98a9-93640392c3d3

Published At-14 Oct, 2022 | 00:00

Updated At-15 May, 2025 | 14:21

In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:Unisoc

Assigner Org ID:63f92e9c-2193-4c24-98a9-93640392c3d3

Published At:14 Oct, 2022 | 00:00

Updated At:15 May, 2025 | 14:21

▼CVE Numbering Authority (CNA)

In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

Affected Products

Vendor

Unisoc (Shanghai) Technologies Co., Ltd.

Product

SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

Versions

Affected

Android10/Android11/Android12

Problem Types

Type	CWE ID	Description
CWE	CWE-126	CWE-126 Buffer Over-read

Type: CWE

CWE ID: CWE-126

Description: CWE-126 Buffer Over-read

References

Hyperlink	Resource
https://www.unisoc.com/en_us/secy/announcementDetail/1575654905820020738	N/A

Hyperlink: https://www.unisoc.com/en_us/secy/announcementDetail/1575654905820020738

Resource: N/A

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://www.unisoc.com/en_us/secy/announcementDetail/1575654905820020738	x_transferred

Hyperlink: https://www.unisoc.com/en_us/secy/announcementDetail/1575654905820020738

Resource:

x_transferred

2. CISA ADP Vulnrichment

Metrics

Version	Base score	Base severity	Vector
3.1	5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Version: 3.1

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Metrics Other Info

▼National Vulnerability Database (NVD)

Source:security@unisoc.com

Published At:14 Oct, 2022 | 19:15

Updated At:15 May, 2025 | 15:15

In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Secondary	3.1	5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Type: Primary

Version: 3.1

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Type: Secondary

Version: 3.1

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CPE Matches

>>android>>10.0

cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*

>>android>>12.0

cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*

Unisoc (Shanghai) Technologies Co., Ltd.

>>s8000>>-

cpe:2.3:h:unisoc:s8000:-:*:*:*:*:*:*:*

Unisoc (Shanghai) Technologies Co., Ltd.

cpe:2.3:h:unisoc:sc7731e:-:*:*:*:*:*:*:*

Unisoc (Shanghai) Technologies Co., Ltd.

cpe:2.3:h:unisoc:sc9832e:-:*:*:*:*:*:*:*

Unisoc (Shanghai) Technologies Co., Ltd.

cpe:2.3:h:unisoc:sc9863a:-:*:*:*:*:*:*:*

Unisoc (Shanghai) Technologies Co., Ltd.

>>t310>>-

cpe:2.3:h:unisoc:t310:-:*:*:*:*:*:*:*

Unisoc (Shanghai) Technologies Co., Ltd.

>>t606>>-

cpe:2.3:h:unisoc:t606:-:*:*:*:*:*:*:*

Unisoc (Shanghai) Technologies Co., Ltd.

>>t610>>-

cpe:2.3:h:unisoc:t610:-:*:*:*:*:*:*:*

Unisoc (Shanghai) Technologies Co., Ltd.

>>t612>>-

cpe:2.3:h:unisoc:t612:-:*:*:*:*:*:*:*

Unisoc (Shanghai) Technologies Co., Ltd.

>>t616>>-

cpe:2.3:h:unisoc:t616:-:*:*:*:*:*:*:*

Unisoc (Shanghai) Technologies Co., Ltd.

>>t618>>-

cpe:2.3:h:unisoc:t618:-:*:*:*:*:*:*:*

Unisoc (Shanghai) Technologies Co., Ltd.

>>t760>>-

cpe:2.3:h:unisoc:t760:-:*:*:*:*:*:*:*

Unisoc (Shanghai) Technologies Co., Ltd.

>>t770>>-

cpe:2.3:h:unisoc:t770:-:*:*:*:*:*:*:*

Unisoc (Shanghai) Technologies Co., Ltd.

>>t820>>-

cpe:2.3:h:unisoc:t820:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-126	Secondary	security@unisoc.com
CWE-787	Primary	nvd@nist.gov

CWE ID: CWE-126

Type: Secondary

Source: security@unisoc.com

CWE ID: CWE-787

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.unisoc.com/en_us/secy/announcementDetail/1575654905820020738	security@unisoc.com	Vendor Advisory
https://www.unisoc.com/en_us/secy/announcementDetail/1575654905820020738	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory

Hyperlink: https://www.unisoc.com/en_us/secy/announcementDetail/1575654905820020738

Source: security@unisoc.com

Resource:

Vendor Advisory

Hyperlink: https://www.unisoc.com/en_us/secy/announcementDetail/1575654905820020738

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory