CVE-2022-39119 - AskarLabs CVE Database

CVE-2022-39119

Vendor Unisoc (Shanghai) Technologies Co., Ltd.

Product SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

Weakness CWE-862 · Missing authorization

Published September 9, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In network service, there is a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

Key dates

02Disclosure timeline

September 9, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-39119 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/862.html

Related vulnerabilities

04Related CVE

CVE-2025-62966 WordPress GoCache plugin <= 1.3.6 - Broken Access Control vulnerability CVE-2025-48242 WordPress Legal Pages plugin <= 1.4.5 - Broken Access Control Vulnerability CVE-2025-48335 WordPress Responsive Plus plugin <= 3.2.0 - Broken Access Control vulnerability CVE-2025-5483 LC Wizard 1.2.10 - 1.3.0 - Missing Authorization to Unauthenticated Privilege Escalation CVE-2025-31863 WordPress Agency Toolkit plugin <= 1.0.24 - Broken Access Control vulnerability

Identifiers

CVE CVE-2022-39119

CWE CWE-862

Affected versions

Vendor Unisoc (Shanghai) Technologies Co., Ltd.

Product SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

Affected Android10/Android11/Android12