Vulnerability Description
In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Android | 11.0 | |
| Unisoc | S8000 | - |
| Unisoc | Sc7731E | - |
| Unisoc | Sc9832E | - |
| Unisoc | Sc9863A | - |
| Unisoc | T310 | - |
| Unisoc | T606 | - |
| Unisoc | T610 | - |
| Unisoc | T612 | - |
| Unisoc | T616 | - |
| Unisoc | T618 | - |
| Unisoc | T760 | - |
| Unisoc | T770 | - |
| Unisoc | T820 | - |
Related Weaknesses (CWE)
References
- https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_uVendor Advisory
- https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_uVendor Advisory
FAQ
What is CVE-2022-48459?
CVE-2022-48459 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed
How severe is CVE-2022-48459?
CVE-2022-48459 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-48459?
Check the references section above for vendor advisories and patch information. Affected products include: Google Android, Unisoc S8000, Unisoc Sc7731E, Unisoc Sc9832E, Unisoc Sc9863A.