
CVE-2022-44419
https://notcve.org/view.php?id=CVE-2022-44419
09 May 2023 — In modem, there is a possible missing verification of NAS Security Mode Command Replay Attacks in LTE. This could local denial of service with no additional execution privileges. • https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761 •

CVE-2022-44420
https://notcve.org/view.php?id=CVE-2022-44420
09 May 2023 — In modem, there is a possible missing verification of HashMME value in Security Mode Command. This could local denial of service with no additional execution privileges. • https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761 • CWE-345: Insufficient Verification of Data Authenticity •

CVE-2022-47485
https://notcve.org/view.php?id=CVE-2022-47485
09 May 2023 — In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. • https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761 • CWE-787: Out-of-bounds Write •

CVE-2022-47334
https://notcve.org/view.php?id=CVE-2022-47334
09 May 2023 — In phasecheck server, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. • https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761 • CWE-125: Out-of-bounds Read •

CVE-2022-48388
https://notcve.org/view.php?id=CVE-2022-48388
09 May 2023 — In powerEx service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. • https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761 • CWE-862: Missing Authorization •

CVE-2022-38685
https://notcve.org/view.php?id=CVE-2022-38685
09 May 2023 — In bluetooth service, there is a possible missing permission check. This could lead to local denial of service in bluetooth service with no additional execution privileges needed. • https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761 • CWE-862: Missing Authorization •

CVE-2022-48387
https://notcve.org/view.php?id=CVE-2022-48387
09 May 2023 — the apipe driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. • https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761 • CWE-787: Out-of-bounds Write •

CVE-2022-48386
https://notcve.org/view.php?id=CVE-2022-48386
09 May 2023 — the apipe driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed. • https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761 • CWE-416: Use After Free •

CVE-2022-48385
https://notcve.org/view.php?id=CVE-2022-48385
09 May 2023 — In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. • https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761 • CWE-787: Out-of-bounds Write •

CVE-2022-48384
https://notcve.org/view.php?id=CVE-2022-48384
09 May 2023 — In srtd service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. • https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761 • CWE-862: Missing Authorization •