
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2023-42723 affects the camera service in Android devices. The vulnerability was discovered and reported by Unisoc. In the camera service, there is a possible out of bounds read vulnerability due to a missing bounds check. This issue affects various Unisoc chipsets including S8000, SC7731E, SC9832E, SC9863A, T310, T606, T610, T612, and T616 running Android 11.0 (NVD).
The vulnerability is classified as an out-of-bounds read (CWE-125) issue in the camera service component. The CVSS v3.1 base score is 5.5 (Medium) with the following vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. This indicates the attack requires local access, low attack complexity, low privileges, and no user interaction (NVD).
If exploited, this vulnerability could lead to local denial of service with no additional execution privileges needed. The impact is primarily on availability (High), while there is no direct impact on confidentiality or integrity (NVD).
The vulnerability has been addressed in security updates. Users of affected devices should ensure they install the latest security patches provided by their device manufacturers or through Android security updates (NVD).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."