CVE-2023-48353

EPSS 0.01%
Veröffentlicht 18.01.2024 03:15:57
Zuletzt bearbeitet 20.06.2025 19:15:24
Quelle security@unisoc.com
Teams Watchlist Login
Unerledigt Login

In vsp driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Android Version11.0

   Unisoc ≫ S8000 Version-
   Unisoc ≫ Sc7731e Version-
   Unisoc ≫ Sc9832e Version-
   Unisoc ≫ Sc9863a Version-
   Unisoc ≫ T310 Version-
   Unisoc ≫ T606 Version-
   Unisoc ≫ T610 Version-
   Unisoc ≫ T612 Version-
   Unisoc ≫ T616 Version-
   Unisoc ≫ T618 Version-
   Unisoc ≫ T760 Version-
   Unisoc ≫ T770 Version-
   Unisoc ≫ T820 Version-

Google ≫ Android Version12.0

Google ≫ Android Version13.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.01%	0.009

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.4	0.8	3.6	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	4.4	0.8	3.6	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

https://www.unisoc.com/en_us/secy/announcementDetail/1745735200442220545

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-48353

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-48353

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-48353

EUVD