CVE-2023-33889

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-862

Affected software

VendorProductVersions
Unisoc (Shanghai) Technologies Co., Ltd.SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000Android10/Android11/Android12/Android13

References

Timeline

Published
Jul 12, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-33897.8A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation. Racing a io_uCVE-2023-338905.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privCVE-2023-338915.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privCVE-2023-338925.5In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution priviCVE-2023-338935.5In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution priviCVE-2023-338945.5In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution priviCVE-2023-338955.5In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution priviCVE-2023-338964.4In libimpl-ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SysteCVE-2023-338974.4In libimpl-ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SysteCVE-2023-338985.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privCVE-2023-338995.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privCVE-2023-33907.8A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c. Mishandled error handl
CVE-2023-33889: Medium severity, CVSS 5.5 | Vulnix