CVE-2022-42776 - AskarLabs CVE Database

CVE-2022-42776

Vendor Unisoc (Shanghai) Technologies Co., Ltd.

Product SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

Weakness CWE-862 · Missing authorization

Published December 6, 2022

Last update April 23, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In UscAIEngine service, there is a missing permission check. This could lead to set up UscAIEngine service with no additional execution privileges needed.

Key dates

02Disclosure timeline

December 6, 2022 CVE published

April 23, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-42776 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/862.html

Related vulnerabilities

04Related CVE

CVE-2025-26961 WordPress Fresh Framework plugin <= 1.70.0 - Unauthenticated Broken Access Control vulnerability CVE-2025-54679 WordPress Neon Channel Product Customizer Free Plugin <= 2.0 - Arbitrary Content Deletion Vulnerability CVE-2026-25939 FUXA Unauthenticated Remote Arbitrary Scheduler Write CVE-2022-1329 Elementor Website Builder 3.6.0 - 3.6.2 - Missing Authorization to Remote Code Execution CVE-2025-63034 WordPress Page View Count plugin <= 2.9.0 - Settings Change vulnerability

Identifiers

CVE CVE-2022-42776

CWE CWE-862

Affected versions

Vendor Unisoc (Shanghai) Technologies Co., Ltd.

Product SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

Affected Android10/Android11/Android12