CVE-2023-52346

EPSS 0.09%
Veröffentlicht 08.04.2024 03:15:08
Zuletzt bearbeitet 06.05.2025 13:56:13
Erkennungen
Login

In modem driver, there is a possible system crash due to improper input validation. This could lead to local information disclosure with System execution privileges needed

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 3 VulnDex Vulnerability Enrichment 13

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Android Version 12.0

   Unisoc ≫ S8000 Version -
   Unisoc ≫ Sc7731e Version -
   Unisoc ≫ Sc9832e Version -
   Unisoc ≫ Sc9863a Version -
   Unisoc ≫ T310 Version -
   Unisoc ≫ T606 Version -
   Unisoc ≫ T610 Version -
   Unisoc ≫ T612 Version -
   Unisoc ≫ T616 Version -
   Unisoc ≫ T618 Version -
   Unisoc ≫ T760 Version -
   Unisoc ≫ T770 Version -
   Unisoc ≫ T820 Version -

Google ≫ Android Version 13.0

Google ≫ Android Version 14.0

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.09%	0.004

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
CISA-ADP	4.4	0.8	3.6	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

https://www.unisoc.com/en_us/secy/announcementDetail/1777143682512781313

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-52346

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-52346

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-52346

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2023-52346