CVE-2022-47456

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.unisoc.com/en_us/secy/announcementDetail/1632612109718192129	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:google:android:10.0:::::::*
	cpe:2.3:o:google:android:11.0:::::::*
	cpe:2.3:o:google:android:12.0:::::::*

OR	cpe:2.3:h:unisoc:s8000:-:::::::*
	cpe:2.3:h:unisoc:sc7731e:-:::::::*
	cpe:2.3:h:unisoc:sc9832e:-:::::::*
	cpe:2.3:h:unisoc:sc9863a:-:::::::*
	cpe:2.3:h:unisoc:t310:-:::::::*
	cpe:2.3:h:unisoc:t606:-:::::::*
	cpe:2.3:h:unisoc:t610:-:::::::*
	cpe:2.3:h:unisoc:t612:-:::::::*
	cpe:2.3:h:unisoc:t616:-:::::::*
	cpe:2.3:h:unisoc:t618:-:::::::*
	cpe:2.3:h:unisoc:t760:-:::::::*
	cpe:2.3:h:unisoc:t770:-:::::::*
	cpe:2.3:h:unisoc:t820:-:::::::*

History

23 Mar 2023, 17:07

Type	Values Removed	Values Added
CPE	cpe:2.3:o:google:android:10.0:-:::::: cpe:2.3:o:unisoc:t770_firmware:-:::::::* cpe:2.3:o:unisoc:sc9863a_firmware:-:::::::* cpe:2.3:o:unisoc:s8000_firmware:-:::::::* cpe:2.3:o:google:android:12.0:-:::::: cpe:2.3:o:unisoc:t310_firmware:-:::::::* cpe:2.3:o:unisoc:sc9832e_firmware:-:::::::* cpe:2.3:o:unisoc:t612_firmware:-:::::::* cpe:2.3:o:unisoc:t618_firmware:-:::::::* cpe:2.3:o:unisoc:t606_firmware:-:::::::* cpe:2.3:o:unisoc:t610_firmware:-:::::::* cpe:2.3:o:unisoc:t820_firmware:-:::::::* cpe:2.3:o:unisoc:sc7731e_firmware:-:::::::* cpe:2.3:o:google:android:11.0:-:::::: cpe:2.3:o:unisoc:t760_firmware:-:::::::* cpe:2.3:o:unisoc:t616_firmware:-:::::::*	cpe:2.3:o:google:android:10.0:::::::* cpe:2.3:o:google:android:12.0:::::::* cpe:2.3:o:google:android:11.0:::::::*

15 Mar 2023, 16:51

Type	Values Removed	Values Added
CPE		cpe:2.3:o:google:android:10.0:-:::::: cpe:2.3:h:unisoc:t606:-:::::::* cpe:2.3:h:unisoc:t310:-:::::::* cpe:2.3:h:unisoc:s8000:-:::::::* cpe:2.3:o:unisoc:t770_firmware:-:::::::* cpe:2.3:o:unisoc:s8000_firmware:-:::::::* cpe:2.3:h:unisoc:t612:-:::::::* cpe:2.3:o:unisoc:t310_firmware:-:::::::* cpe:2.3:h:unisoc:sc7731e:-:::::::* cpe:2.3:o:unisoc:t612_firmware:-:::::::* cpe:2.3:h:unisoc:t760:-:::::::* cpe:2.3:h:unisoc:t616:-:::::::* cpe:2.3:o:unisoc:t820_firmware:-:::::::* cpe:2.3:o:unisoc:sc9863a_firmware:-:::::::* cpe:2.3:h:unisoc:t618:-:::::::* cpe:2.3:o:unisoc:t616_firmware:-:::::::* cpe:2.3:h:unisoc:t820:-:::::::* cpe:2.3:h:unisoc:sc9863a:-:::::::* cpe:2.3:o:google:android:12.0:-:::::: cpe:2.3:o:unisoc:sc9832e_firmware:-:::::::* cpe:2.3:h:unisoc:t610:-:::::::* cpe:2.3:h:unisoc:t770:-:::::::* cpe:2.3:o:unisoc:t618_firmware:-:::::::* cpe:2.3:o:unisoc:t610_firmware:-:::::::* cpe:2.3:o:unisoc:t606_firmware:-:::::::* cpe:2.3:h:unisoc:sc9832e:-:::::::* cpe:2.3:o:unisoc:sc7731e_firmware:-:::::::* cpe:2.3:o:google:android:11.0:-:::::: cpe:2.3:o:unisoc:t760_firmware:-:::::::*
CWE		CWE-125
References	~~(MISC) https://www.unisoc.com/en_us/secy/announcementDetail/1632612109718192129 -~~	(MISC) https://www.unisoc.com/en_us/secy/announcementDetail/1632612109718192129 - Vendor Advisory
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 5.5

11 Mar 2023, 02:54

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-03-10 21:15

Updated : 2024-02-04 23:14

NVD link : CVE-2022-47456

Mitre link : CVE-2022-47456

CVE.ORG link : CVE-2022-47456

JSON object : View

Products Affected

unisoc

t760
t770
t310
sc9832e
t606
t616
t610
sc9863a
t820
t612
s8000
sc7731e
t618

google

android

CWE

CWE-125

Out-of-bounds Read

5.5 /10