Unisoc SC9863 Android OOB Read/Write Vulnerabilities (CVE-2025-5170/5171/5172)

Summary Severity: CVEs Version: 1.0 Details CVE-2025-5172 Title: Due to the Copy/Write function of "Oscilloscope" in the CoreBoard, a segmentation fault occurs. Description: Improper bounds checks lead to out-of-bounds reads/writes. Threat Level: Medium Attack Vector: Local Access Vector: Local Complexity: Medium Confidence: S CVSS Score: CVSS:3.1/AV:L/AC:M/PR:H/UI:N/S:C/C:H/I:H/A:H Affected Devices: SC9863A/SC9863B/SC9863C/SC9863D/SC9863E/SC9863F/SC9863G/SC9863H/SC9863I/SC9863J/SC9863K/SC9863L/SC9863M/SC9863N/SC9863O/SC9863P/SC9863Q/SC9863R/SC9863S/SC9863T/SC9863U/SC9863V/SC9863W/SC9863X/SC9863Y/SC9863Z Affected Software/Versions: Android 9/Android 10/Android 11 CVE-2025-5171 Title: N/A Description: Improper bounds checks lead to out-of-bounds reads/writes. Threat Level: Medium Attack Vector: Local Access Vector: Local Complexity: Medium Confidence: H CVSS Score: CVSS:3.1/AV:L/AC:M/PR:H/UI:N/S:C/C:H/I:H/A:H Affected Devices: SC9863A/SC9863B/SC9863C/SC9863D/SC9863E/SC9863F/SC9863G/SC9863H/SC9863I/SC9863J/SC9863K/SC9863L/SC9863M/SC9863N/SC9863O/SC9863P/SC9863Q/SC9863R/SC9863S/SC9863T/SC9863U/SC9863V/SC9863W/SC9863X/SC9863Y/SC9863Z Affected Software/Versions: Android 9/Android 10/Android 11 CVE-2025-5170 Title: N/A Description: Improper bounds checks lead to out-of-bounds reads/writes. Threat Level: Medium Attack Vector: Local Access Vector: Local Complexity: Medium Confidence: L CVSS Score: CVSS:3.1/AV:L/AC:M/PR:H/UI:N/S:C/C:H/I:H/A:H Affected Devices: SC9863A/SC9863B/SC9863C/SC9863D/SC9863E/SC9863F/SC9863G/SC9863H/SC9863I/SC9863J/SC9863K/SC9863L/SC9863M/SC9863N/SC9863O/SC9863P/SC9863Q/SC9863R/SC9863S/SC9863T/SC9863U/SC9863V/SC9863W/SC9863X/SC9863Y/SC9863Z Affected Software/Versions: Android 9/Android 10/Android 11 Vulnerability Type Definition Introduction: Improper bounds checks lead to out-of-bounds reads/writes. CVE-ID: CVE-2025-5172/CVE-2025-5171/CVE-2025-5170 Version Vendor: UNISOC Date: 2023-03-31

Goal Reached Thanks to every supporter — we hit 100%!

Unisoc SC9863 Android OOB Read/Write Vulnerabilities (CVE-2025-5170/5171/5172)