CVE-2022-46320

2022-12-2021:15:11

CWE-125

[email protected]

web.nvd.nist.gov

kernel module vulnerability

out-of-bounds read

memory overwriting

cve-2022-46320

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.003

Percentile

69.3%

JSON

The kernel module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may cause memory overwriting.

Affected configurations

Nvd

Node

huaweiharmonyosRange<2.0

Node

huaweiemuiMatch11.0.1

huaweiemuiMatch12.0.0

huaweiemuiMatch12.0.1

VendorProductVersionCPE
huaweiharmonyos*cpe:2.3:o:huawei:harmonyos:*:*:*:*:*:*:*:*
huaweiemui11.0.1cpe:2.3:o:huawei:emui:11.0.1:*:*:*:*:*:*:*
huaweiemui12.0.0cpe:2.3:o:huawei:emui:12.0.0:*:*:*:*:*:*:*
huaweiemui12.0.1cpe:2.3:o:huawei:emui:12.0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	harmonyos	*	cpe:2.3:o:huawei:harmonyos::::::::
huawei	emui	11.0.1	cpe:2.3:o:huawei:emui:11.0.1:::::::*
huawei	emui	12.0.0	cpe:2.3:o:huawei:emui:12.0.0:::::::*
huawei	emui	12.0.1	cpe:2.3:o:huawei:emui:12.0.1:::::::*