CVE-2023-40632

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In jpg driver, there is a possible use after free due to a logic error. This could lead to remote information disclosure no additional execution privileges needed

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
Unisoc (Shanghai) Technologies Co., Ltd.T606/T612/T616Android13
unisoct606android13
unisoct612Android13
unisoct616Android13

References

Timeline

Published
Oct 8, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-406335.5In phasecheckserver, there is a possible missing permission check. This could lead to local information disclosure with no additional executCVE-2023-406347.8In phasechecksercer, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execuCVE-2023-406357.8In linkturbo, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution prCVE-2023-406364.4In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead tCVE-2023-406375.5In telecom service, there is a possible missing permission check. This could lead to local information disclosure with no additional executiCVE-2023-406384.4In Telecom service, there is a possible missing permission check. This could lead to local denial of service with System execution privilegeCVE-2023-406395.5In SoundRecorder service, there is a possible missing permission check. This could lead to local information disclosure with no additional eCVE-2023-406405.5In SoundRecorder service, there is a possible missing permission check. This could lead to local information disclosure with no additional eCVE-2023-406415.5In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution priCVE-2023-406425.5In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution priCVE-2023-406435.5In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution priCVE-2023-406445.5In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution pri
CVE-2023-40632: High severity, CVSS 7.5 | Vulnix