First published: Thu Jan 18 2024(Updated: )
In vsp driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
Credit: security@unisoc.com
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
Any of | ||
Android | =11.0 | |
Android | =12.0 | |
Android | =13.0 | |
Any of | ||
Unisoc S8000 Firmware | ||
Unisoc SC7731 | ||
Unisoc SC9832E Firmware | ||
Unisoc SC9863A Firmware | ||
Unisoc T310 | ||
Unisoc T606 | ||
Unisoc T610 | ||
Unisoc T612 | ||
Unisoc T616 | ||
UniSoc T618 | ||
Unisoc T760 Firmware | ||
Unisoc T770 | ||
Unisoc T820 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-48357 is classified as a medium severity vulnerability due to its potential impact on local denial of service.
To fix CVE-2023-48357, ensure you update the affected Android device to the latest security patch provided by the manufacturer.
CVE-2023-48357 affects Android versions 11.0, 12.0, and 13.0.
CVE-2023-48357 impacts devices running specific versions of Google Android, but listed Unisoc chipsets are not vulnerable.
CVE-2023-48357 can lead to a local denial of service due to a possible out of bounds write.