Vulnerabilites related to Unisoc (Shanghai) Technologies Co., Ltd. - T310/T606/T612/T616/T610/T618/T750/T765/T760/T770/T820/S8000
CVE-2024-39441 (GCVE-0-2024-39441)
Vulnerability from cvelistv5
Published
2025-02-26 05:45
Modified
2025-02-26 15:34
Severity ?
VLAI Severity ?
EPSS score ?
Summary
In wifi display, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.
References
Impacted products
Vendor | Product | Version | ||
---|---|---|---|---|
Unisoc (Shanghai) Technologies Co., Ltd. | T310/T606/T612/T616/T610/T618/T750/T765/T760/T770/T820/S8000 |
Version: Android13/Android14/Android15 |
{ "containers": { "adp": [ { "metrics": [ { "other": { "content": { "id": "CVE-2024-39441", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "total" } ], "role": "CISA Coordinator", "timestamp": "2025-02-26T14:49:16.536343Z", "version": "2.0.3" }, "type": "ssvc" } } ], "providerMetadata": { "dateUpdated": "2025-02-26T15:34:21.609Z", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP" }, "title": "CISA ADP Vulnrichment" } ], "cna": { "affected": [ { "defaultStatus": "unaffected", "product": "T310/T606/T612/T616/T610/T618/T750/T765/T760/T770/T820/S8000", "vendor": "Unisoc (Shanghai) Technologies Co., Ltd.", "versions": [ { "status": "affected", "version": "Android13/Android14/Android15" } ] } ], "descriptions": [ { "lang": "en", "value": "In wifi display, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed." } ], "metrics": [ { "cvssV3_1": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "version": "3.1" }, "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ] } ], "problemTypes": [ { "descriptions": [ { "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2025-02-26T05:45:36.102Z", "orgId": "63f92e9c-2193-4c24-98a9-93640392c3d3", "shortName": "Unisoc" }, "references": [ { "url": "https://www.unisoc.com/en_us/secy/announcementDetail/1894203086612791298" } ] } }, "cveMetadata": { "assignerOrgId": "63f92e9c-2193-4c24-98a9-93640392c3d3", "assignerShortName": "Unisoc", "cveId": "CVE-2024-39441", "datePublished": "2025-02-26T05:45:36.102Z", "dateReserved": "2024-06-25T06:13:32.360Z", "dateUpdated": "2025-02-26T15:34:21.609Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }