CVE-2024-39430 MEDIUM

CVE-2024-39430

Vendor Unisoc (Shanghai) Technologies Co., Ltd.
Product SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618
Published July 1, 2024
Last update August 19, 2024

CVSS base score

5.1/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

What the vulnerability does

01Description

In faceid servive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed

Key dates

02Disclosure timeline

July 1, 2024 CVE published
August 19, 2024 Record updated