Lucene search

[email protected]CVE-2022-41603

HistoryOct 14, 2022 - 4:15 p.m.

CVE-2022-41603

2022-10-1416:15:30

CWE-476

CWE-787

CWE-125

[email protected]

web.nvd.nist.gov

cve-2022-41603

phones

heap overflow

out-of-bounds read

null pointer

fingerprint ta

vulnerabilities

fingerprint service

nvd

3.4 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L

4.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

Affected configurations

NVD

Node

huaweiemuiMatch11.0.1

huaweiemuiMatch12.0.0

huaweiharmonyosMatch2.0

CPENameOperatorVersion
huawei:emuihuawei emuieq11.0.1
huawei:emuihuawei emuieq12.0.0
huawei:harmonyoshuawei harmonyoseq2.0

CPE	Name	Operator	Version
huawei:emui	huawei emui	eq	11.0.1
huawei:emui	huawei emui	eq	12.0.0
huawei:harmonyos	huawei harmonyos	eq	2.0

CNA Affected

[
  {
    "vendor": "Huawei",
    "product": "HarmonyOS",
    "versions": [
      {
        "version": "2.0",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Huawei",
    "product": "EMUI",
    "versions": [
      {
        "version": "12.0.0",
        "status": "affected"
      },
      {
        "version": "11.0.1",
        "status": "affected"
      }
    ]
  }
]

References

consumer.huawei.com/en/support/bulletin/2022/10/

device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697

Social References

3.4 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L

4.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2022-41603

prion1 cvelist1 nvd1