CVE-2025-31712

EPSS 0.01%
Published 03.06.2025 05:50:53
Last modified 10.06.2025 15:15:48
Source security@unisoc.com
Teams watchlist Login
Open Login

In cplog service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed.

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD

This information is available to logged-in users.

Data is provided by the National Vulnerability Database (NVD)

Google ≫ Android Version13.0

   Unisoc ≫ S8000 Version-
   Unisoc ≫ Sc7731e Version-
   Unisoc ≫ Sc9832e Version-
   Unisoc ≫ Sc9863a Version-
   Unisoc ≫ T310 Version-
   Unisoc ≫ T606 Version-
   Unisoc ≫ T610 Version-
   Unisoc ≫ T612 Version-
   Unisoc ≫ T616 Version-
   Unisoc ≫ T618 Version-
   Unisoc ≫ T750 Version-
   Unisoc ≫ T760 Version-
   Unisoc ≫ T765 Version-
   Unisoc ≫ T770 Version-
   Unisoc ≫ T820 Version-
   Unisoc ≫ T8300 Version-
   Unisoc ≫ T9300 Version-

Google ≫ Android Version14.0

Google ≫ Android Version15.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.01%	0.019

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.2	2.5	3.6	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
security@unisoc.com	5.1	2.5	2.5	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

https://www.unisoc.com/en_us/secy/announcementDetail/1929773763314909186

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-31712

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-31712

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-31712

EUVD