CVE-2022-44436

CVE-2022-44436

Vendor Unisoc (Shanghai) Technologies Co., Ltd.
Product SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Weakness CWE-862 · Missing authorization
Published January 4, 2023
Last update April 10, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.

Key dates

02Disclosure timeline

January 4, 2023 CVE published
April 10, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2023-51519 WordPress Slider by Soliloquy – Responsive Image Slider for WordPress plugin <= 2.7.2 - Broken Access Control vulnerability CVE-2024-12719 WordPress File Upload <= 4.24.15 - Missing Authorization to Authenticated (Subscriber+) Limited Path Traversal CVE-2025-39561 WordPress LoginWP - Pro Plugin <= 4.0.8.5 - Broken Access Control vulnerability CVE-2023-51670 WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Arbitrary Plugin Activation vulnerability CVE-2024-10853 Buy one click WooCommerce <= 2.2.9 - Missing Authorization to Authenticated (Subscriber+) Order Deletion