CVE-2022-38693

In FDL1, there is a possible missing payload size check. This could lead to memory buffer overflow without requiring additional execution privileges.

Score

CVSS 3.1 9.8 Critical

Status

Deferred - security@unisoc.com

Published

2025-09-01

Last modified

2025-09-02

Weaknesses

CWE-119

Affected products

• Sc9863at310t610t618t606t612t616t760t770t820s8000t750t765 (Unisoc Shanghai Technologies Co. Ltd.)

References

• https://www.nccgroup.com/research-blog/there-s-another-hole-in-your-soc-unisoc-rom-vulnerabilities/