Huawei Harmonyos vulnerabilities

CVE-2022-41586 [HIGH] CWE-130 CVE-2022-41586: The communication framework module has a vulnerability of not truncating data properly.Successful ex The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affect data confidentiality.

CVE-2022-41584 [HIGH] CWE-125 CVE-2022-41584: The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerabil The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting.

CVE-2022-38998 [HIGH] CWE-125 CVE-2022-38998: The HISP module has a vulnerability of not verifying the data transferred in the kernel space.Succes The HISP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which affects data confidentiality.

CVE-2022-41588 [HIGH] CWE-1264 CVE-2022-41588: The home screen module has a vulnerability in service logic processing.Successful exploitation of th The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integrity.

CVE-2022-38984 [HIGH] CWE-125 CVE-2022-38984: The HIPP module has a vulnerability of not verifying the data transferred in the kernel space.Succes The HIPP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which affects data confidentiality.

CVE-2022-41582 [HIGH] CWE-15 CVE-2022-41582: The security module has configuration defects.Successful exploitation of this vulnerability may affe The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability.

CVE-2022-38981 [HIGH] CWE-125 CVE-2022-38981: The HwAirlink module has an out-of-bounds read vulnerability.Successful exploitation of this vulnera The HwAirlink module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause information leakage.

CVE-2022-38985 [HIGH] CWE-20 CVE-2022-38985: The facial recognition module has a vulnerability in input validation.Successful exploitation of thi The facial recognition module has a vulnerability in input validation.Successful exploitation of this vulnerability may affect data confidentiality.

CVE-2022-41577 [HIGH] CWE-125 CVE-2022-41577: The kernel server has a vulnerability of not verifying the length of the data transferred in the use The kernel server has a vulnerability of not verifying the length of the data transferred in the user space.Successful exploitation of this vulnerability may cause out-of-bounds read in the kernel, which affects the device confidentiality and availability.

CVE-2022-41598 [LOW] CWE-125 CVE-2022-41598: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41595 [LOW] CWE-125 CVE-2022-41595: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41597 [LOW] CWE-125 CVE-2022-41597: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41592 [LOW] CWE-125 CVE-2022-41592: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41600 [LOW] CWE-125 CVE-2022-41600: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41601 [LOW] CWE-125 CVE-2022-41601: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41603 [LOW] CWE-125 CVE-2022-41603: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41602 [LOW] CWE-125 CVE-2022-41602: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41593 [LOW] CWE-125 CVE-2022-41593: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-41594 [LOW] CWE-125 CVE-2022-41594: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the finge The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

CVE-2022-39007 [CRITICAL] CWE-269 CVE-2022-39007: The location module has a vulnerability of bypassing permission verification.Successful exploitation The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause privilege escalation.