CVE-2023-38554

In wcn bsp driver, there is a possible out of bounds write due to a missing bounds check.This could lead to local denial of service with…

Medium5.5EPSS 0.09%

Published: 4 Sept 2023
Updated: 30 Sept 2024
Reserved: 20 Jul 2023
Assigned by: Unisoc

Description

In wcn bsp driver, there is a possible out of bounds write due to a missing bounds check.This could lead to local denial of service with no additional execution privileges

Scores

CVSS scores of CVE-2023-38554, by who scored it
Scored by	CVSS	Score	Vector
NVDNVD · Modified	3.1	Medium5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS (exploitation in 30 days): 0.09% · top 100% of all CVEs (6 Nov 2026)
CISA SSVC: Exploitation: none · Automatable: no · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.

Weakness

CWE-787 (opens in a new tab)All about CWE-787 and its CVEs

Affected products

Unisoc (Shanghai) Technologies Co., Ltd. · SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- affected Android11/Android12/Android13

References (1)

https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434 (opens in a new tab)x_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2023-38554](https://trackcve.app/badge/CVE-2023-38554.svg)](https://trackcve.app/cve/CVE-2023-38554)

Record last updated 30 Sept 2024, 18:56 UTC.