Lucene search

K
nvd[email protected]NVD:CVE-2022-38977
HistoryOct 14, 2022 - 4:15 p.m.

CVE-2022-38977

2022-10-1416:15:13
CWE-787
web.nvd.nist.gov
7
hwairlink
heap overflow
out-of-bounds writes
sensitive data modification

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

31.8%

The HwAirlink module has a heap overflow vulnerability.Successful exploitation of this vulnerability may cause out-of-bounds writes, resulting in modification of sensitive data.

Affected configurations

Nvd
Node
huaweiharmonyosMatch2.0
OR
huaweiharmonyosMatch2.1
VendorProductVersionCPE
huaweiharmonyos2.0cpe:2.3:o:huawei:harmonyos:2.0:*:*:*:*:*:*:*
huaweiharmonyos2.1cpe:2.3:o:huawei:harmonyos:2.1:*:*:*:*:*:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

31.8%

Related for NVD:CVE-2022-38977