Lucene search

[email protected]NVD:CVE-2022-41592

HistoryOct 14, 2022 - 4:15 p.m.

CVE-2022-41592

2022-10-1416:15:26

CWE-125

CWE-476

CWE-787

[email protected]

web.nvd.nist.gov

phones

heap overflow

fingerprint

vulnerabilities

out-of-bounds read

null pointer

CVSS3

3.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L

EPSS

Percentile

12.6%

JSON

The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.

Affected configurations

Nvd

Node

huaweiemuiMatch11.0.1

huaweiemuiMatch12.0.0

huaweiharmonyosMatch2.0

VendorProductVersionCPE
huaweiemui11.0.1cpe:2.3:o:huawei:emui:11.0.1:*:*:*:*:*:*:*
huaweiemui12.0.0cpe:2.3:o:huawei:emui:12.0.0:*:*:*:*:*:*:*
huaweiharmonyos2.0cpe:2.3:o:huawei:harmonyos:2.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	emui	11.0.1	cpe:2.3:o:huawei:emui:11.0.1:::::::*
huawei	emui	12.0.0	cpe:2.3:o:huawei:emui:12.0.0:::::::*
huawei	harmonyos	2.0	cpe:2.3:o:huawei:harmonyos:2.0:::::::*

References

consumer.huawei.com/en/support/bulletin/2022/10/

device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697

CVSS3

3.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L

EPSS

Percentile

12.6%

JSON

Related for NVD:CVE-2022-41592

cvelist1 prion1 cve1