CWE
862
Advisory Published
Updated

CVE-2022-38678

First published: Wed Jan 04 2023(Updated: )

In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.

Credit: security@unisoc.com

Affected SoftwareAffected VersionHow to fix
Android=10.0
Android=11.0
Android=12.0
Unisoc S8000 Firmware
Unisoc SC7731
Unisoc SC9832E Firmware
Unisoc SC9863A Firmware
Unisoc T310
Unisoc T606
Unisoc T610
Unisoc T612
Unisoc T616
UniSoc T618
Unisoc T760 Firmware
Unisoc T770
Unisoc T820

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of CVE-2022-38678?

    CVE-2022-38678 is classified as a medium severity vulnerability due to its potential for local denial of service in the contacts service.

  • How do I fix CVE-2022-38678?

    To mitigate CVE-2022-38678, ensure that your Android system is updated to the latest version that includes security patches addressing this vulnerability.

  • Which versions of Android are affected by CVE-2022-38678?

    CVE-2022-38678 affects Android versions 10.0, 11.0, and 12.0.

  • Can CVE-2022-38678 be exploited remotely?

    CVE-2022-38678 cannot be exploited remotely as it requires local access to the device.

  • What impacts does CVE-2022-38678 have on user experience?

    CVE-2022-38678 can cause a local denial of service, potentially disrupting the functionality of the contacts service.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203