CVE-2022-39118

EPSS 0.12%
Veröffentlicht 04.01.2023 10:15:12
Zuletzt bearbeitet 10.04.2025 15:15:49
Erkennungen
Login

In sprd_sysdump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 2 Referenzen 4

NVD 3 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Android Version 10.0

   Unisoc ≫ S8000 Version -
   Unisoc ≫ Sc7731e Version -
   Unisoc ≫ Sc9832e Version -
   Unisoc ≫ Sc9863a Version -
   Unisoc ≫ T310 Version -
   Unisoc ≫ T606 Version -
   Unisoc ≫ T610 Version -
   Unisoc ≫ T612 Version -
   Unisoc ≫ T616 Version -
   Unisoc ≫ T618 Version -
   Unisoc ≫ T760 Version -
   Unisoc ≫ T770 Version -
   Unisoc ≫ T820 Version -

Google ≫ Android Version 11.0

Google ≫ Android Version 12.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.12%	0.019

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA-ADP	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.unisoc.com/en_us/secy/announcementDetail/1610118225591336001

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-39118

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-39118

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-39118

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2022-39118