Reddit NetSec

CVE Database V5

AlienVault OTX General

Exploit-DB RSS Feed

Reddit InfoSec News

CIRCL OSINT Feed

ThreatFox MISP Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

CVE-2022-42781 is a medium-severity vulnerability identified in the WLAN driver of several Unisoc (Shanghai) Technologies Co., Ltd. chipsets, including SC9863A, SC9832E, SC7731E, T610, T310, T606, T760, T618, T612, T616, T770, T820, and S8006. These chipsets are commonly embedded in Android devices running versions 10, 11, and 12. The vulnerability stems from a missing bounds check in the WLAN driver, which leads to a buffer over-read condition (CWE-126). A buffer over-read occurs when a program reads data beyond the boundary of a buffer, potentially causing unexpected behavior or crashes. In this case, the flaw can be exploited locally by an attacker with low privileges (local access with low privileges required) to trigger a denial of service (DoS) condition affecting WLAN services. The CVSS v3.1 base score is 5.5, reflecting a medium severity level, with the vector indicating local attack vector (AV:L), low attack complexity (AC:L), low privileges required (PR:L), no user interaction (UI:N), unchanged scope (S:U), no impact on confidentiality or integrity (C:N, I:N), but high impact on availability (A:H). There are no known exploits in the wild as of the published date (December 6, 2022), and no patches have been officially released by the vendor. The vulnerability is limited to local exploitation, meaning an attacker must have local access to the device to trigger the issue. The affected chipsets are widely used in budget and mid-range Android smartphones, particularly those manufactured by OEMs that source Unisoc SoCs. The vulnerability could cause WLAN services to crash or become unresponsive, disrupting wireless connectivity and potentially impacting device usability and network access. Because the flaw does not affect confidentiality or integrity, the primary risk is service disruption rather than data compromise or privilege escalation.

Detailed information about CVE-2022-42781: cwe-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610

CVE-2022-42781: cwe-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8006 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2022-42781: cwe-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8006

CVE-2022-42780 is a medium-severity vulnerability identified in the WLAN driver of several Unisoc (Shanghai) Technologies Co., Ltd. chipsets, specifically models SC9863A, SC9832E, SC7731E, T310, T606, T610, T612, T616, T618, T760, T770, T820, and S8005. These chipsets are commonly integrated into Android devices running versions 10, 11, and 12. The vulnerability stems from a missing bounds check in the WLAN driver, which leads to a buffer over-read condition classified under CWE-126. A buffer over-read occurs when a program reads data beyond the boundaries of a buffer, potentially causing memory corruption or crashes. In this case, the flaw can be triggered locally by a user or process with limited privileges (low privilege requirement) without any user interaction. The impact is a denial of service (DoS) targeting WLAN services, which could disrupt wireless connectivity on affected devices. The CVSS 3.1 base score is 5.5, reflecting medium severity, with the vector indicating local attack vector (AV:L), low attack complexity (AC:L), requiring privileges (PR:L), no user interaction (UI:N), unchanged scope (S:U), no impact on confidentiality or integrity (C:N/I:N), and high impact on availability (A:H). There are no known exploits in the wild, and no patches have been explicitly linked or published at this time. The vulnerability was reserved in October 2022 and publicly disclosed in December 2022. Given the nature of the flaw, exploitation would require local access to the device, such as through a malicious app or local user, to trigger the WLAN driver fault and cause service disruption. This could affect device usability and network connectivity but does not directly expose sensitive data or allow code execution.

Detailed information about CVE-2022-42780: cwe-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610

CVE-2022-42780: cwe-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8005 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2022-42780: cwe-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8005

CVE-2022-42779 is a medium-severity vulnerability identified in the WLAN driver of several Unisoc (Shanghai) Technologies Co., Ltd. chipsets, including SC9863A, SC9832E, SC7731E, T310, T606, T610, T618, T612, T616, T760, T770, T820, and S8003. These chipsets are commonly integrated into Android devices running versions 10, 11, and 12. The vulnerability stems from a missing bounds check in the WLAN driver code, which leads to a buffer over-read condition classified under CWE-126. A buffer over-read occurs when a program reads data beyond the allocated buffer boundaries, potentially causing memory corruption or crashes. In this case, the flaw can be exploited locally by an attacker with low privileges (local access with low complexity) to trigger a denial of service (DoS) condition affecting WLAN services. The CVSS v3.1 base score is 5.5, reflecting a medium impact primarily on availability, with no impact on confidentiality or integrity. Exploitation does not require user interaction but does require local privileges, meaning an attacker must already have some level of access to the device. There are no known exploits in the wild, and no patches have been publicly linked yet. The vulnerability could cause WLAN service crashes or instability, disrupting network connectivity on affected devices. Since the flaw is in the WLAN driver, it is specific to devices using these Unisoc chipsets, which are prevalent in certain budget and mid-range Android smartphones and IoT devices. The vulnerability does not allow remote exploitation or privilege escalation but can degrade device availability locally.

Detailed information about CVE-2022-42779: cwe-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610

CVE-2022-42779: cwe-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8003 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2022-42779: cwe-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8003

CVE-2022-42762 is a medium-severity vulnerability identified in the WLAN driver of several Unisoc (Shanghai) Technologies Co., Ltd. chipsets, including SC9863A, SC9832E, SC7731E, T610, T310, T606, T760, T618, T612, T616, T770, T820, and S8004. These chipsets are commonly integrated into Android devices running versions 10, 11, and 12. The vulnerability stems from a missing bounds check in the WLAN driver code, which leads to a buffer over-read condition classified under CWE-126. A buffer over-read occurs when a program reads more data than the buffer's allocated size, potentially causing memory corruption or crashes. In this case, the flaw can be exploited locally by an attacker with low privileges (PR:L) and no user interaction (UI:N) is required. The attack vector is local (AV:L), meaning the attacker must have local access to the device, such as through a malicious app or compromised user environment. The impact is limited to availability (A:H), causing a denial of service (DoS) in WLAN services, potentially disrupting wireless connectivity on affected devices. There is no impact on confidentiality or integrity. The vulnerability does not currently have known exploits in the wild, and no patches have been linked publicly yet. The CVSS v3.1 base score is 5.5, reflecting medium severity due to the ease of exploitation locally and the significant impact on availability but limited scope and no confidentiality or integrity impact. The affected chipsets are widely used in budget and mid-range Android smartphones, especially in markets where Unisoc SoCs are prevalent. The vulnerability could cause WLAN service crashes, leading to loss of wireless connectivity, which can disrupt communications and device usability until a reboot or fix is applied.

Detailed information about CVE-2022-42762: cwe-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610

CVE-2022-42762: cwe-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8004 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2022-42762: cwe-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8004

CVE-2022-42759 is a medium-severity vulnerability identified in the WLAN driver of several Unisoc (Shanghai) Technologies Co., Ltd. chipsets, including SC9863A, SC9832E, SC7731E, T310, T606, T610, T612, T616, T618, T760, T770, T820, and S8017. These chipsets are commonly integrated into Android devices running versions 10, 11, and 12. The vulnerability stems from a missing bounds check in the WLAN driver code, which leads to a buffer over-read condition classified under CWE-126. A buffer over-read occurs when a program reads more data than the buffer's allocated size, potentially causing memory corruption or crashes. In this case, the flaw can be exploited locally by an attacker with limited privileges (low privileges required) and does not require user interaction. The primary impact is a denial of service (DoS) condition affecting WLAN services, which could disrupt wireless connectivity on the affected device. The CVSS v3.1 base score is 5.5, reflecting a medium severity level, with attack vector local (AV:L), low attack complexity (AC:L), privileges required low (PR:L), no user interaction (UI:N), unchanged scope (S:U), no impact on confidentiality or integrity (C:N/I:N), and high impact on availability (A:H). There are no known exploits in the wild, and no patches have been explicitly linked in the provided data. The vulnerability was reserved in October 2022 and published in December 2022. Given the affected chipsets are embedded in Android devices, the vulnerability could affect smartphones, tablets, and IoT devices using these Unisoc chipsets, potentially causing WLAN service interruptions due to local exploitation.

Detailed information about CVE-2022-42759: cwe-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610

CVE-2022-42759: cwe-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8017 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2022-42759: cwe-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8017

CVE-2022-42758 is a vulnerability identified in the WLAN driver of several Unisoc (Shanghai) Technologies Co., Ltd. chipsets, including SC9863A, SC9832E, SC7731E, and multiple T-series models (T610, T310, T606, T760, T618, T612, T616, T770, T820, S8016). These chipsets are commonly integrated into Android devices running versions 10, 11, and 12. The vulnerability arises due to a missing bounds check in the WLAN driver code, which leads to a buffer over-read condition classified under CWE-126. A buffer over-read occurs when a program reads data beyond the allocated buffer boundaries, potentially causing unexpected behavior or crashes. In this case, the consequence is a local denial of service (DoS) affecting WLAN services on the device. The vulnerability requires local privileges with low complexity and no user interaction, as indicated by the CVSS vector (AV:L/AC:L/PR:L/UI:N). The impact is limited to availability, with no confidentiality or integrity compromise. No known exploits have been reported in the wild, and no patches have been publicly linked yet. The vulnerability was reserved in October 2022 and published in December 2022, with a CVSS score of 3.3, indicating a low severity level. The affected WLAN driver is a critical component managing wireless connectivity, so exploitation could disrupt network access on affected devices, causing service interruptions and potential user inconvenience.

Detailed information about CVE-2022-42758: cwe-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610

CVE-2022-42758: cwe-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8016 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2022-42758: cwe-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8016

CVE-2022-42757 is a vulnerability identified in the WLAN driver of several Unisoc (Shanghai) Technologies Co., Ltd. chipsets, including SC9863A, SC9832E, SC7731E, T610, T310, T606, T760, T618, T612, T616, T770, T820, and S8015. These chipsets are commonly integrated into Android devices running versions 10, 11, and 12. The vulnerability stems from a missing bounds check in the WLAN driver, which leads to a buffer over-read condition classified under CWE-126. A buffer over-read occurs when a program reads data beyond the boundaries of a buffer, potentially causing unexpected behavior or crashes. In this case, the flaw can be exploited locally by an attacker with limited privileges (low privileges) to cause a denial of service (DoS) by disrupting WLAN services on the device. The CVSS 3.1 base score is 3.3, indicating a low severity level, with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L, meaning the attack requires local access, low complexity, low privileges, no user interaction, and impacts only availability without affecting confidentiality or integrity. No known exploits are currently reported in the wild, and no patches have been linked yet. The vulnerability is limited to local denial of service and does not allow remote code execution or privilege escalation. The affected chipsets are widely used in budget and mid-range Android smartphones, particularly those manufactured or sold in markets where Unisoc chipsets have significant penetration. The issue is technical in nature, involving driver-level memory handling errors, and requires local access to the device to trigger the fault, which limits the attack surface primarily to device owners or users with physical or local access.

Detailed information about CVE-2022-42757: cwe-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610

CVE-2022-42757: cwe-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8015 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2022-42757: cwe-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8015

CVE-2022-42774 is a medium-severity vulnerability identified in the WLAN driver of several Unisoc (Shanghai) Technologies Co., Ltd. chipsets, including SC9863A, SC9832E, SC7731E, and multiple T-series models (T310, T606, T610, T612, T616, T618, T760, T770, T820) as well as S8002. These chipsets are commonly integrated into Android devices running versions 10, 11, and 12. The vulnerability arises from a missing bounds check in the WLAN driver code, which leads to a buffer over-read condition classified under CWE-126 and CWE-125. A buffer over-read occurs when the software reads data beyond the allocated buffer boundaries, potentially causing memory corruption or system instability. In this case, the flaw can be triggered locally by an attacker with low privileges (local access with low complexity) and does not require user interaction. The impact is a denial of service (DoS) affecting WLAN services, which could cause the wireless network interface to crash or become unresponsive, disrupting network connectivity on affected devices. The CVSS v3.1 base score is 5.5 (medium), reflecting the local attack vector, low attack complexity, low privileges required, no user interaction, and impact limited to availability (no confidentiality or integrity impact). There are no known exploits in the wild at this time, and no official patches have been linked or published yet. The vulnerability was reserved in October 2022 and publicly disclosed in December 2022. Given the affected chipsets are widely used in budget and mid-range Android smartphones, the vulnerability poses a risk primarily to mobile users relying on these devices for wireless connectivity. The lack of a patch and the local nature of the attack suggest that exploitation would require physical or local access to the device, limiting the attack surface but still posing a risk in scenarios such as malicious apps or compromised local environments.

Detailed information about CVE-2022-42774: cwe-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610

CVE-2022-42774: cwe-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8002 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2022-42774: cwe-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8002

CVE-2022-42768 is a medium-severity vulnerability identified in the WLAN driver components of several Unisoc (Shanghai) Technologies Co., Ltd. chipsets, including SC9863A, SC9832E, SC7731E, and multiple T-series models such as T610, T310, T606, T760, T618, T612, T616, T770, T820, and S8013. These chipsets are commonly integrated into Android devices running versions 10, 11, and 12. The vulnerability arises from a missing bounds check in the WLAN driver, leading to a buffer over-read condition classified under CWE-126 and CWE-125. This flaw allows an attacker with local privileges (PR:L) to cause a denial of service (DoS) by triggering a crash or malfunction in WLAN services, impacting availability without affecting confidentiality or integrity. The CVSS 3.1 base score is 4.3, reflecting a medium severity level, with an attack vector of network (AV:N) but requiring local privileges and no user interaction. No known exploits are currently reported in the wild, and no patches have been publicly linked yet. The vulnerability is primarily a local DoS risk, potentially disrupting wireless connectivity on affected devices, which could impact user experience and device functionality but does not enable remote code execution or data compromise.

Detailed information about CVE-2022-42768: cwe-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610

CVE-2022-42768: cwe-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8013 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2022-42768: cwe-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8013

In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

CVE-2022-39132 is a medium-severity vulnerability identified in the camera driver of multiple Unisoc (Shanghai) Technologies Co., Ltd. chipsets, including SC9863A, SC9832E, SC7731E, and several others (T610, T310, T606, T760, T618, T612, T616, T770, T820, S8000). The vulnerability arises from a missing bounds check in the camera driver, leading to a possible out-of-bounds write condition. This is categorized under CWE-126 (Buffer Over-read) and CWE-787 (Out-of-bounds Write). The flaw affects devices running Android versions 10, 11, and 12 that incorporate these Unisoc chipsets. The vulnerability can be exploited locally by an attacker with low privileges (PR:L) and does not require user interaction (UI:N). Exploitation results in a denial of service (DoS) condition at the kernel level, impacting system availability but not confidentiality or integrity. The CVSS v3.1 base score is 5.5 (medium), with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, indicating local attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, but high impact on availability. No known exploits are currently reported in the wild, and no patches have been linked yet. The vulnerability was reserved in early September 2022 and published in December 2022. The technical root cause is a missing bounds check in the camera driver code, which can cause out-of-bounds memory writes, potentially crashing the kernel or causing system instability. This vulnerability is relevant for devices using Unisoc chipsets, which are commonly found in budget and mid-range smartphones, particularly in markets where Unisoc has significant penetration. Given the local nature of the exploit, an attacker would need local access to the device, such as through a malicious app or physical access, to trigger the vulnerability.

Detailed information about CVE-2022-39132: CWE-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610

CVE-2022-39132: CWE-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2022-39132: CWE-126 Buffer Over-read in Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

Title	Severity	Type	Source	Date

Threats Tagged 'cwe-126-buffer-over-read'

Filter Threats

Threats Tagged 'cwe-126-buffer-over-read'

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility