Huawei: >> Harmonyos Security Vulnerabilities
The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access.
CVSS Score
9.1
EPSS Score
0.002
Published
2022-10-14
The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability.
CVSS Score
7.5
EPSS Score
0.002
Published
2022-10-14
The storage maintenance and debugging module has an array out-of-bounds read vulnerability.Successful exploitation of this vulnerability will cause incorrect statistics of this module.
CVSS Score
7.5
EPSS Score
0.002
Published
2022-10-14
The MPTCP module has an out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause root privilege escalation attacks implemented by modifying program information.
CVSS Score
9.8
EPSS Score
0.002
Published
2022-10-14
The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access.
CVSS Score
9.8
EPSS Score
0.002
Published
2022-10-14
The rphone module has a script that can be maliciously modified.Successful exploitation of this vulnerability may cause irreversible programs to be implanted on user devices.
CVSS Score
7.8
EPSS Score
0.001
Published
2022-10-14
The kernel server has a vulnerability of not verifying the length of the data transferred in the user space.Successful exploitation of this vulnerability may cause out-of-bounds read in the kernel, which affects the device confidentiality and availability.
CVSS Score
7.1
EPSS Score
0.001
Published
2022-10-14
The HISP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause unauthorized access to the HISP module.
CVSS Score
7.5
EPSS Score
0.002
Published
2022-10-14
The HIPP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause out-of-bounds access to the HIPP module and page table tampering, affecting device confidentiality and availability.
CVSS Score
9.1
EPSS Score
0.002
Published
2022-10-14
The HISP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which affects data confidentiality.
CVSS Score
7.5
EPSS Score
0.002
Published
2022-10-14