CVE-2022-22253 — Improper Validation of Integrity Check Value in Huawei Emui

CWE-354 — Improper Validation of Integrity Check Value3 documents3 sources

Severity

7.5HIGHNVD

EPSS

0.0%

top 85.97%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Huawei Emui Huawei Harmonyos Huawei Magic UI

Timeline

PublishedApr 11

Latest updateApr 12

Description

The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages6 packages

▶CVEListV5huawei/emui6 versions+5

▶NVDhuawei/emui6 versions+5

▶CVEListV5huawei/magic_ui4 versions+3

▶NVDhuawei/magic_ui4 versions+3

▶CVEListV5huawei/harmonyos2.0

🔴Vulnerability Details

GHSA

GHSA-h75x-vhrr-wjrq: The DFX module has a vulnerability of improper validation of integrity check values↗2022-04-12

▶

CVEList

CVE-2022-22253: The DFX module has a vulnerability of improper validation of integrity check values↗2022-04-11

▶