CVE-2022-48298

Summary

The geofencing kernel code does not verify the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounds memory access.

Affected Software

Weaknesses

• Out-of-bounds memory access vulnerability

ADP Enrichment

CVE Program Container

Additional References

• https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474
• https://consumer.huawei.com/en/support/bulletin/2023/2/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474
• https://consumer.huawei.com/en/support/bulletin/2023/2/

• ←Previous
• Next→