Unisoc Technologies Co Ltd T760 T770 T820 S8000 vulnerabilities

CVE-2023-52341 [HIGH] CWE-200 CVE-2023-52341: In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missi In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed

CVE-2023-52342 [HIGH] CWE-248 CVE-2023-52342: In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This c In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote information disclosure no additional execution privileges needed

CVE-2023-52343 [MEDIUM] CWE-1284 CVE-2023-52343: In SecurityCommand message after as security has been actived., there is a possible improper input v In SecurityCommand message after as security has been actived., there is a possible improper input validation. This could lead to remote information disclosure no additional execution privileges needed

CVE-2023-52344 [MEDIUM] CWE-476 CVE-2023-52344: In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This c In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote information disclosure no additional execution privileges needed

CVE-2023-52533 [MEDIUM] CWE-475 CVE-2023-52533: In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This c In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote information disclosure no additional execution privileges needed

CVE-2023-52534 [MEDIUM] CWE-754 CVE-2023-52534: In ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to In ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote denial of service with no additional execution privileges needed

CVE-2023-42720 [MEDIUM] CWE-125 CVE-2023-42720: In video service, there is a possible out of bounds read due to a missing bounds check. This could l In video service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed

CVE-2023-42655 [MEDIUM] CWE-862 CVE-2023-42655: In sim service, there is a possible way to write permission usage records of an app due to a missing In sim service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed

CVE-2023-42645 [MEDIUM] CVE-2023-42645: In sim service, there is a possible way to write permission usage records of an app due to a missing In sim service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

CVE-2023-40638 [MEDIUM] CWE-862 CVE-2023-40638: In Telecom service, there is a possible missing permission check. This could lead to local denial of In Telecom service, there is a possible missing permission check. This could lead to local denial of service with System execution privileges needed

CVE-2023-40636 [MEDIUM] CWE-862 CVE-2023-40636: In telecom service, there is a possible way to write permission usage records of an app due to a mis In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with System execution privileges needed

CVE-2023-33915 [HIGH] CWE-862 CVE-2023-33915: In LTE protocol stack, there is a possible missing permission check. This could lead to remote infor In LTE protocol stack, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed

CVE-2023-33914 [HIGH] CWE-20 CVE-2023-33914: In NIA0 algorithm in Security Mode Command, there is a possible missing verification incorrect input In NIA0 algorithm in Security Mode Command, there is a possible missing verification incorrect input. This could lead to remote information disclosure no additional execution privileges needed