Vulnerabilidades en Unisoc (Shanghai) Technologies Co., Ltd.

656 resultados
Análisis Vexday

Com 647 CVEs catalogadas e nenhuma presença no catálogo KEV da CISA, a Unisoc apresenta taxa de exploração ativa abaixo da média geral do catálogo, o que sugere baixa pressão ofensiva documentada no momento. O tipo de falha mais recorrente é CWE-862 (ausência de verificação de autorização), padrão que, quando explorado, permite acesso não autorizado a recursos ou funcionalidades restritas e merece atenção especial em revisões de código e hardening. A CVE mais relevante no contexto atual é CVE-2025-31715, com escore EPSS de 0,0156, indicando probabilidade de exploração ainda baixa, mas que deve ser monitorada dado seu destaque entre as ameaças ativas. As 6 vulnerabilidades surgidas nos últimos 90 dias e a ausência de PoCs públicas apontam para um perfil de risco moderado, embora a presença de 4 CVEs críticas reforce a necessidade de acompanhamento contínuo das atualizações do fabricante.

CVE-2023-52535MEDIUMIn vsp driver, there is a possible missing verification incorrect input. This could lead to local denial of service with no additional execuEPSS 0.1%CVE-2023-40643—In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution priEPSS 0.1%CVE-2023-40650—In Telecom service, there is a possible missing permission check. This could lead to local information disclosure with no additional executiEPSS 0.1%CVE-2023-38441—In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution EPSS 0.1%CVE-2025-31712MEDIUMIn cplog service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no EPSS 0.1%CVE-2023-40649—In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution priEPSS 0.1%CVE-2023-38440—In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution EPSS 0.1%CVE-2023-38454—In vowifi service, there is a possible missing permission check.This could lead to local information disclosure with no additional executionEPSS 0.1%CVE-2023-40648—In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution priEPSS 0.1%CVE-2023-42631—In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional executiEPSS 0.1%CVE-2023-40644—In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution priEPSS 0.1%CVE-2023-40637—In telecom service, there is a possible missing permission check. This could lead to local information disclosure with no additional executiEPSS 0.1%CVE-2023-38442—In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution EPSS 0.1%CVE-2023-38463—In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution priviEPSS 0.1%CVE-2023-38462—In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution priviEPSS 0.1%CVE-2024-39440MEDIUMIn DRM service, there is a possible system crash due to null pointer dereference. This could lead to local denial of service with System exeEPSS 0.1%CVE-2024-39433MEDIUMIn drm service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SysteEPSS 0.1%CVE-2023-40640—In SoundRecorder service, there is a possible missing permission check. This could lead to local information disclosure with no additional eEPSS 0.1%CVE-2023-38445—In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution priviEPSS 0.1%CVE-2024-39439MEDIUMIn DRM service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SysteEPSS 0.1%