Huawei: >> Harmonyos Security Vulnerabilities
The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.
CVSS Score
3.4
EPSS Score
0.0
Published
2022-10-14
The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integrity.
CVSS Score
7.5
EPSS Score
0.001
Published
2022-10-14
The DFX unwind stack module of the ArkCompiler has a vulnerability in interface calling.Successful exploitation of this vulnerability affects system services and device availability.
CVSS Score
7.5
EPSS Score
0.001
Published
2022-10-14
The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affect data confidentiality.
CVSS Score
7.5
EPSS Score
0.001
Published
2022-10-14
The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting.
CVSS Score
7.8
EPSS Score
0.0
Published
2022-10-14
The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting.
CVSS Score
7.8
EPSS Score
0.0
Published
2022-10-14
The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access.
CVSS Score
9.1
EPSS Score
0.001
Published
2022-10-14
The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability.
CVSS Score
7.5
EPSS Score
0.001
Published
2022-10-14
The storage maintenance and debugging module has an array out-of-bounds read vulnerability.Successful exploitation of this vulnerability will cause incorrect statistics of this module.
CVSS Score
7.5
EPSS Score
0.001
Published
2022-10-14
The MPTCP module has an out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause root privilege escalation attacks implemented by modifying program information.
CVSS Score
9.8
EPSS Score
0.001
Published
2022-10-14