6.7
Medium
CVE-2023-42655 In sim service, there is a possible way to write permission usage records of an app due to a missing permission check
Description
In sim service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| T760/T770/T820/S8000 | Versions not published | |
| t760 | Versions not published | |
| t770 | Versions not published | |
| t820 | Versions not published | |
| s8000 | Versions not published |
Other CVEs of T760/T770/T820/S8000
The 13 CVEs of T760/T770/T820/S8000 →
CVE-2023-52534
In ngmm, there is a possible undefined behavior due to incorrect error handling
5.9
Medium
CVE-2023-52533
In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling
5.3
Medium
CVE-2023-52344
In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling
5.3
Medium
CVE-2023-52343
In SecurityCommand message after as security has been actived., there is a possible improper input validation
5.5
Medium