CVE-2023-52348 - Vulnerability Details - OpenCVE

In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://www.unisoc.com/en_us/secy/announcementDetail/1777143682512781313

History

Tue, 19 Nov 2024 22:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-787
Metrics		cvssV3_1 `{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Unisoc

Published: 2024-04-08T02:21:16.603Z

Updated: 2024-11-19T21:31:04.308Z

Reserved: 2024-01-19T02:58:31.098Z

Link: CVE-2023-52348

Vulnrichment

Updated: 2024-08-02T22:55:41.481Z

NVD

Status : Awaiting Analysis

Published: 2024-04-08T03:15:08.597

Modified: 2024-11-21T08:39:36.970

Link: CVE-2023-52348

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-52348", "assignerOrgId": "63f92e9c-2193-4c24-98a9-93640392c3d3", "state": "PUBLISHED", "assignerShortName": "Unisoc", "dateReserved": "2024-01-19T02:58:31.098Z", "datePublished": "2024-04-08T02:21:16.603Z", "dateUpdated": "2024-11-19T21:31:04.308Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "63f92e9c-2193-4c24-98a9-93640392c3d3", "shortName": "Unisoc", "dateUpdated": "2024-04-08T02:21:16.603Z"}, "references": [{"url": "https://www.unisoc.com/en_us/secy/announcementDetail/1777143682512781313"}], "affected": [{"defaultStatus": "unaffected", "product": "SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000", "versions": [{"version": "Android12/Android13/Android14", "status": "affected"}], "vendor": "Unisoc (Shanghai) Technologies Co., Ltd."}], "descriptions": [{"lang": "en", "value": "In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed"}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-787", "lang": "en", "description": "CWE-787 Out-of-bounds Write"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-07-16T19:41:10.773102Z", "id": "CVE-2023-52348", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-19T21:31:04.308Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T22:55:41.481Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.unisoc.com/en_us/secy/announcementDetail/1777143682512781313", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.unisoc.com/en_us/secy/announcementDetail/1777143682512781313", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T22:55:41.481Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2023-52348", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-07-16T19:41:10.773102Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-787", "description": "CWE-787 Out-of-bounds Write"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-16T19:41:15.268Z"}}], "cna": {"affected": [{"vendor": "Unisoc (Shanghai) Technologies Co., Ltd.", "product": "SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000", "versions": [{"status": "affected", "version": "Android12/Android13/Android14"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.unisoc.com/en_us/secy/announcementDetail/1777143682512781313"}], "descriptions": [{"lang": "en", "value": "In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed"}], "providerMetadata": {"orgId": "63f92e9c-2193-4c24-98a9-93640392c3d3", "shortName": "Unisoc", "dateUpdated": "2024-04-08T02:21:16.603Z"}}}, "cveMetadata": {"cveId": "CVE-2023-52348", "state": "PUBLISHED", "dateUpdated": "2024-11-19T21:31:04.308Z", "dateReserved": "2024-01-19T02:58:31.098Z", "assignerOrgId": "63f92e9c-2193-4c24-98a9-93640392c3d3", "datePublished": "2024-04-08T02:21:16.603Z", "assignerShortName": "Unisoc"}, "dataVersion": "5.1"}