CVE-2022-39110 - AskarLabs CVE Database

CVE-2022-39110

Vendor Unisoc (Shanghai) Technologies Co., Ltd.

Product SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

Weakness CWE-862 · Missing authorization

Published October 14, 2022

Last update May 15, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed.

Key dates

02Disclosure timeline

October 14, 2022 CVE published

May 15, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-39110 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/862.html

Related vulnerabilities

04Related CVE

CVE-2025-53217 WordPress AIO WP Builder Plugin <= 2.0.2 - Broken Access Control Vulnerability CVE-2025-58976 WordPress Accessibility Checker by Equalize Digital Plugin <= 1.31.0 - Broken Access Control Vulnerability CVE-2024-28003 WordPress Max Mega Menu plugin <= 3.3 - Broken Access Control vulnerability CVE-2024-35174 WordPress Flo Forms plugin <= 1.0.42 - Broken Access Control vulnerability CVE-2025-9954 Acquia DAM - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-105

Identifiers

CVE CVE-2022-39110

CWE CWE-862

Affected versions

Vendor Unisoc (Shanghai) Technologies Co., Ltd.

Product SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

Affected Android10/Android11/Android12