CVE-2023-52536

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

In faceid service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
Unisoc (Shanghai) Technologies Co., Ltd.SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000Android12/Android13/Android14

References

Timeline

Published
Apr 8, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-525377.5Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this vulnerability will afCVE-2023-525389.1Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this vulnerability will afCVE-2023-525397.5Permission verification vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confiCVE-2023-52545.3The ChatBot plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.8.9 via the qcld_wb_chaCVE-2023-525407.5Vulnerability of improper authentication in the Iaware module. Impact: Successful exploitation of this vulnerability will affect availabilitCVE-2023-525417.5Authentication vulnerability in the API for app pre-loading. Impact: Successful exploitation of this vulnerability may affect service confidCVE-2023-525426.5Permission verification vulnerability in the system module. Impact: Successful exploitation of this vulnerability will affect availability.CVE-2023-525436.2Permission verification vulnerability in the system module. Impact: Successful exploitation of this vulnerability will affect availability.CVE-2023-525444.3Vulnerability of file path verification being bypassed in the email module. Impact: Successful exploitation of this vulnerability may affectCVE-2023-525457.5Vulnerability of undefined permissions in the Calendar app. Impact: Successful exploitation of this vulnerability will affect availability.CVE-2023-525467.5Vulnerability of package name verification being bypassed in the Calendar app. Impact: Successful exploitation of this vulnerability may affCVE-2023-525477.8Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26. Memory Corruption in SMI Handler of HddPassword SMM Module. This can be leveraged by a ma
CVE-2023-52536: Medium severity, CVSS 4.4 | Vulnix