PT-2023-15268 · Unknown · Vdsp Device

Publicado 2023-09-04 · Atualizado 2024-10-27 · CVE-2022-47353

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions vdsp device (affected versions not specified)

Description The issue is related to improper input validation in the vdsp device, which could lead to a system crash. This could result in a local denial of service, with system execution privileges needed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2022-47353

Produtos afetados

Vdsp Device

Referências · 5

• https://t.me/cvenotify/99664 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2022-47353 · Aviso do Fabricante
• https://unisoc.com/en_us/secy/announcementDetail/https://unisoc.com/en_us/secy/announcementDetail/1698296481653522434 · Nota
• https://t.me/cibsecurity/69715 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2022-47353 · Nota de Segurança