CVE-2022-38694

HIGH

BootRom - Privilege Escalation

Title source: llm

Description

In BootRom, there is a possible unchecked write address. This could lead to local escalation of privilege with no additional execution privileges needed.

Exploits (7)

nomisec WORKING POC 507 stars
by TomKing062 · poc
https://github.com/TomKing062/CVE-2022-38694_unlock_bootloader
nomisec WORKING POC 57 stars
by TheGammaSqueeze · poc
https://github.com/TheGammaSqueeze/Bootloader_Unlock_Anbernic_T820
nomisec WRITEUP 1 stars
by Seriousattempts · poc
https://github.com/Seriousattempts/Bootloader_Unlock_Retroid_Pocket_3Plus
nomisec WORKING POC
by AureliusIvan · poc
https://github.com/AureliusIvan/ubl-itel-s23
nomisec WORKING POC
by AureliusIvanInvenioPTL · poc
https://github.com/AureliusIvanInvenioPTL/ubl-itel-s23
nomisec WORKING POC
by xbxarchivr · poc
https://github.com/xbxarchivr/UNISOCUnlocker

Scores

CVSS v3 7.8
EPSS 0.0054
EPSS Percentile 67.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-250
Status published
Products (1)
Unisoc (Shanghai) Technologies Co., Ltd./SC9863A//T310/T610/T618/ /
Published Sep 01, 2025
Tracked Since Feb 18, 2026