CVE-2023-33914

Published: Sep 4, 2023Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

In NIA0 algorithm in Security Mode Command, there is a possible missing verification incorrect input. This could lead to remote information disclosure no additional execution privileges needed

Affected (3)

Products: Google: Android

Google

1 product

Android

Configuration A

3 vulnerable · 4 platform

Vulnerable Software	Affected Versions
Google Android	Version 11.0
Google Android	Version 12.0
Google Android	Version 13.0

Running on/with	Platform Versions
Unisoc S8000	All versions
Unisoc T760	All versions
Unisoc T770	All versions
Unisoc T820	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434

Source: security@unisoc.com

Broken Link

https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

Timeline

No history available yet.