The geofencing kernel code does not verify the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounds memory access.
References
Link | Resource |
---|---|
https://consumer.huawei.com/en/support/bulletin/2023/2/ | Vendor Advisory |
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474 | Patch Vendor Advisory |
Configurations
History
08 Aug 2023, 14:22
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-1284 |
16 Feb 2023, 19:57
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-20 | |
CPE | cpe:2.3:o:huawei:emui:12.0.1:*:*:*:*:*:*:* cpe:2.3:o:huawei:harmonyos:2.0:*:*:*:*:*:*:* cpe:2.3:o:huawei:harmonyos:3.0.0:*:*:*:*:*:*:* |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
References | (MISC) https://consumer.huawei.com/en/support/bulletin/2023/2/ - Vendor Advisory | |
References | (MISC) https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474 - Patch, Vendor Advisory | |
First Time |
Huawei
Huawei emui Huawei harmonyos |
09 Feb 2023, 18:01
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-02-09 17:15
Updated : 2023-12-10 14:48
NVD link : CVE-2022-48298
Mitre link : CVE-2022-48298
CVE.ORG link : CVE-2022-48298
JSON object : View
Products Affected
huawei
- emui
- harmonyos
CWE
CWE-1284
Improper Validation of Specified Quantity in Input