Vulnerabilidades em Unisoc (Shanghai) Technologies Co., Ltd.

661 resultados
Análise Vexday

Com 647 CVEs catalogadas e nenhuma presença no catálogo KEV da CISA, a Unisoc apresenta taxa de exploração ativa abaixo da média geral do catálogo, o que sugere baixa pressão ofensiva documentada no momento. O tipo de falha mais recorrente é CWE-862 (ausência de verificação de autorização), padrão que, quando explorado, permite acesso não autorizado a recursos ou funcionalidades restritas e merece atenção especial em revisões de código e hardening. A CVE mais relevante no contexto atual é CVE-2025-31715, com escore EPSS de 0,0156, indicando probabilidade de exploração ainda baixa, mas que deve ser monitorada dado seu destaque entre as ameaças ativas. As 6 vulnerabilidades surgidas nos últimos 90 dias e a ausência de PoCs públicas apontam para um perfil de risco moderado, embora a presença de 4 CVEs críticas reforce a necessidade de acompanhamento contínuo das atualizações do fabricante.

CVE-2023-52351HIGHIn ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SysteEPSS 0.1%CVE-2022-47456—In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2022-48232MEDIUMIn FM service , there is a possible missing params check. This could lead to local denial of service in FM service .EPSS 0.1%CVE-2022-47367MEDIUMIn bluetooth driver, there is a missing permission check. This could lead to local information disclosure with no additional execution priviEPSS 0.1%CVE-2022-47460—In gpu device, there is a memory corruption due to a use after free. This could lead to local denial of service in kernel.EPSS 0.1%CVE-2022-42771MEDIUMIn wlan driver, there is a race condition, This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2022-47453—In wcn service, there is a possible missing params check. This could lead to local denial of service in wcn service.EPSS 0.1%CVE-2022-42770MEDIUMIn wlan driver, there is a race condition, This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2022-48234MEDIUMIn FM service , there is a possible missing params check. This could lead to local denial of service in FM service .EPSS 0.1%CVE-2022-47454—In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2022-48233MEDIUMIn FM service , there is a possible missing params check. This could lead to local denial of service in FM service .EPSS 0.1%CVE-2022-47457—In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2022-47338HIGHIn telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.EPSS 0.1%CVE-2023-40654MEDIUMIn FW-PackageManager, there is a possible missing permission check. This could lead to local escalation of privilege with System execution pEPSS 0.1%CVE-2022-47371MEDIUMIn bt driver, there is a thread competition leads to early release of resources to be accessed. This could lead to local denial of service iEPSS 0.1%CVE-2022-39134MEDIUMIn audio driver, there is a use after free due to a race condition. This could lead to local denial of service in kernel.EPSS 0.1%CVE-2022-47459—In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2022-47458MEDIUMIn wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2022-47455—In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2023-42655MEDIUMIn sim service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to loEPSS 0.1%