CVE-2022-48297

CVSS V2 None CVSS V3 None

Description

The geofencing kernel code has a vulnerability of not verifying the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounds memory access.

Overview

CVE ID
CVE-2022-48297

Assigner
psirt@huawei.com

Vulnerability Status
Analyzed

Published Version
2023-02-09T17:15:14

Last Modified Date
2023-02-16T19:52:19

Weakness Enumerations

CWE	URL
CWE-20	http://cwe.mitre.org/data/definitions/20.html

CPE Configuration (Product)

CPE	Vulnerable	Operator	Version Start	Version End
cpe:2.3:o:huawei:emui:12.0.1:::::::*	1	OR
cpe:2.3:o:huawei:harmonyos:2.0:::::::*	1	OR
cpe:2.3:o:huawei:harmonyos:3.0.0:::::::*	1	OR

References

Reference URL	Reference Tags
https://consumer.huawei.com/en/support/bulletin/2023/2/	Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474	Patch Vendor Advisory

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2022-48297
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48297

History

Created	Old Value	New Value	Data Type	Notes
2023-04-17 07:26:17				Added to TrackCVE
2023-04-17 07:26:20			Weakness Enumeration	new