Vulnerability · Published Apr 8, 2024 · Assigned by Unisoc

CVE-2023-52342

High 7.5

In plain English

A high-severity security flaw in T760/T770/T820/S8000 from Unisoc (Shanghai) Technologies Co., Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 27% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.3%top 72.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote information disclosure no additional execution privileges needed

Affected products (as reported)

VendorProductVersions
Unisoc (Shanghai) Technologies Co., Ltd. T760/T770/T820/S8000 Android12/Android13/Android14

Weakness: CWE-248 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References