Security Vulnerabilities - CVEs Published In 2022
The HiView module has a vulnerability of not filtering third-party apps out when the HiView module traverses to invoke the system provider. Successful exploitation of this vulnerability may cause third-party apps to start periodically.
CVSS Score
5.3
EPSS Score
0.003
Published
2022-11-09
The power module has a vulnerability in permission verification. Successful exploitation of this vulnerability may cause abnormal status of a module on the device.
CVSS Score
7.5
EPSS Score
0.005
Published
2022-11-09
The DDMP/ODMF module has a service hijacking vulnerability. Successful exploit of this vulnerability may cause services to be unavailable.
CVSS Score
7.5
EPSS Score
0.005
Published
2022-11-09
The SmartTrimProcessEvent module has a vulnerability of obtaining the read and write permissions on arbitrary system files. Successful exploitation of this vulnerability may affect data confidentiality.
CVSS Score
7.5
EPSS Score
0.004
Published
2022-11-09
The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation.
CVSS Score
9.8
EPSS Score
0.006
Published
2022-11-09
The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation.
CVSS Score
9.8
EPSS Score
0.006
Published
2022-11-09
The launcher module has an Intent redirection vulnerability. Successful exploitation of this vulnerability may cause launcher module data to be modified.
CVSS Score
5.3
EPSS Score
0.003
Published
2022-11-09
The preset launcher module has a permission verification vulnerability. Successful exploitation of this vulnerability makes unauthorized apps add arbitrary widgets and shortcuts without interaction.
CVSS Score
7.5
EPSS Score
0.004
Published
2022-11-09
The system framework layer has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation.
CVSS Score
9.8
EPSS Score
0.006
Published
2022-11-09
There is a race condition vulnerability in SD upgrade mode. Successful exploitation of this vulnerability may affect data confidentiality.
CVSS Score
5.9
EPSS Score
0.004
Published
2022-11-09