CVE-2023-33879 — Missing Authorization in Technologies CO LTD Sc9863a Sc9832e Sc7731e T610 T310 T606 T760 T610 T618 T606 T612 T616 T760 T770 T

CWE-862 — Missing Authorization3 documents3 sources
Severity
3.3LOWNVD
EPSS
0.0%
top 91.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Unisoc Technologies CO LTD Sc9863a Sc9832e Sc7731e T610 T310 T606 T760 T610 T618 T606 T612 T616 T760 T770 TGoogle Android
Timeline
PublishedJul 12
Latest updateJul 15

Description

In music service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:NExploitability: 1.8 | Impact: 1.4

Affected Packages2 packages

▶NVDgoogle/android4 versions+3

🔴Vulnerability Details

1
GHSA
GHSA-xfwm-9jhj-mjg4: In music service, there is a missing permission check↗2023-07-12
▶

📋Vendor Advisories

1
Oracle
Oracle Oracle Financial Services Applications Risk Matrix: Reports (Apache Tika) — CVE-2022-33879↗2023-07-15
▶