Lucene search

HuaweiCVE-2022-39002

HistorySep 16, 2022 - 6:15 p.m.

CVE-2022-39002

2022-09-1618:15:17

CWE-415

huawei

web.nvd.nist.gov

cve-2022-39002

double free vulnerability

storage module

memory exploitation

nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.002

Percentile

60.5%

JSON

Double free vulnerability in the storage module. Successful exploitation of this vulnerability will cause the memory to be freed twice.

Affected configurations

Nvd

Vulners

Node

huaweiemuiMatch11.0.0

huaweiharmonyosMatch2.0

huaweimagic_uiMatch4.0.0

VendorProductVersionCPE
huaweiemui11.0.0cpe:2.3:o:huawei:emui:11.0.0:*:*:*:*:*:*:*
huaweiharmonyos2.0cpe:2.3:o:huawei:harmonyos:2.0:*:*:*:*:*:*:*
huaweimagic_ui4.0.0cpe:2.3:o:huawei:magic_ui:4.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	emui	11.0.0	cpe:2.3:o:huawei:emui:11.0.0:::::::*
huawei	harmonyos	2.0	cpe:2.3:o:huawei:harmonyos:2.0:::::::*
huawei	magic_ui	4.0.0	cpe:2.3:o:huawei:magic_ui:4.0.0:::::::*

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "HarmonyOS;EMUI;Magic UI",
    "versions": [
      {
        "version": "HarmonyOS 2.0",
        "status": "affected"
      },
      {
        "version": "EMUI 11.0.0",
        "status": "affected"
      },
      {
        "version": "Magic UI 4.0.0",
        "status": "affected"
      }
    ]
  }
]

References

consumer.huawei.com/en/support/bulletin/2022/9/

device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697

Social References

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.002

Percentile

60.5%

JSON

Related for CVE-2022-39002