Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://hackmd.io/%40eupX2KdkT6iNpqJUWk9p4A/SyAnOSd1s
CVE ID: CVE-2022-38956 State: PUBLISHED Published: 2022-09-20T17:46:22.000Z Last Updated: 2025-05-28T16:11:50.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: An exploitable firmware downgrade vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to replace the user-uploaded firmware image with an original old firmware image. This affects Firmware 1.1.1_1.1.9 and earlier. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://hackmd.io/%40eupX2KdkT6iNpqJUWk9p4A/SyAnOSd1s
CVE ID: CVE-2022-38970 State: PUBLISHED Published: 2022-09-26T10:21:58.000Z Last Updated: 2025-05-21T17:53:51.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: ieGeek IG20 hipcam RealServer V1.0 is vulnerable to Incorrect Access Control. The algorithm used to generate device IDs (UIDs) for devices that utilize Shenzhen Yunni Technology iLnkP2P suffers from a predictability flaw that allows remote attackers to establish direct connections to arbitrary devices. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.realinfosec.net/cybersecurity-news/iegeek-vulnerabilities-still-prevalent-in-2022-amazon-ft-ig20/
CVE ID: CVE-2022-38971 State: PUBLISHED Published: 2023-03-16T08:49:16.146Z Last Updated: 2025-01-13T15:51:17.378Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N) Vendors: ThemeKraft Products: Post Form – Registration Form – Profile Form for User Profiles and Content Forms for User Submissions Problem Types: CWE-79 Description: Stored Cross-Site Scripting (XSS) vulnerability in ThemeKraft Post Form – Registration Form – Profile Form for User Profiles and Content Forms for User Submissions plugin <= 2.7.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/buddyforms/wordpres
gram Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/buddyforms/wordpress-buddyforms-plugin-2-7-2-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2022-38972 State: PUBLISHED Published: 2022-09-12T01:50:14 Last Updated: 2024-08-03T11:10:31.617Z Vendors: ARK-Web co., ltd. Products: A-Form Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Movable Type plugin A-Form versions prior to 4.1.1 (for Movable Type 7 Series) and versions prior to 3.9.1 (for Movable Type 6 Series) allows a remote unauthenticated attacker to inject an arbitrary script. Additional Analyst Notes: - CVE Program Container: References: - https://www.ark-web.jp/blog/archives/2022/09/a-series-411-391.html - https://www.ark-web.jp/movabletype/blog/2022/09/a-series-411-391.html - https://jvn.jp/en/jp/JVN48120704/index.html
CVE ID: CVE-2022-38973 State: PUBLISHED Published: 2023-08-11T02:36:59.521Z Last Updated: 2024-10-02T14:02:00.117Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:L) Vendors: n/a Products: Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition Problem Types: denial of service, CWE-284 Description: Improper access control for some Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition sold between October of 2022 and December of 2022 may allow an authenticated user to potentially enable denial of service or infomation disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/cont
ess. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00812.html
CVE ID: CVE-2022-38974 State: PUBLISHED Published: 2022-11-18T18:13:32.875Z Last Updated: 2025-02-20T19:53:19.318Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: OnTheGoSystems Ltd. Products: WPML Multilingual CMS (WordPress plugin) Problem Types: CWE-264 Description: Broken Access Control vulnerability in WPML Multilingual CMS premium plugin <= 4.5.10 on WordPress allows users with subscriber or higher user roles to change the status of the translation jobs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/sitepress-multilingual-cms/wordpress-wpml-multilingual-cms-plugin
ences: - https://patchstack.com/database/vulnerability/sitepress-multilingual-cms/wordpress-wpml-multilingual-cms-plugin-4-5-10-broken-access-control-vulnerability-2?_s_id=cve
CVE ID: CVE-2022-38975 State: PUBLISHED Published: 2022-09-27T01:55:16.000Z Last Updated: 2025-05-21T18:24:22.908Z Vendors: EC-CUBE CO.,LTD. Products: EC-CUBE 4 series Problem Types: Cross-site scripting Description: DOM-based cross-site scripting vulnerability in EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a remote attacker to inject an arbitrary script by having an administrative user of the product to visit a specially crafted page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ec-cube.net/info/weakness/20220909/ - https://jvn.jp/en/jp/JVN21213852/index.html
CVE ID: CVE-2022-38977 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-15T14:33:36.543Z Vendors: Huawei Products: HarmonyOS Problem Types: Heap overflow vulnerability Description: The HwAirlink module has a heap overflow vulnerability.Successful exploitation of this vulnerability may cause out-of-bounds writes, resulting in modification of sensitive data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697
CVE ID: CVE-2022-38978 State: PUBLISHED Published: 2022-09-16T17:56:37 Last Updated: 2024-08-03T11:10:31.617Z Vendors: Huawei Products: HarmonyOS, EMUI, Magic UI Problem Types: Configuration defects Description: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845 - https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE ID: CVE-2022-38979 State: PUBLISHED Published: 2022-09-16T17:56:43 Last Updated: 2024-08-03T11:10:31.710Z Vendors: Huawei Products: HarmonyOS, EMUI, Magic UI Problem Types: Configuration defects Description: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845 - https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE ID: CVE-2022-38980 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-15T14:45:25.290Z Vendors: Huawei Products: HarmonyOS Problem Types: Heap overflow vulnerability Description: The HwAirlink module has a heap overflow vulnerability in processing data packets of the proprietary protocol.Successful exploitation of this vulnerability may allow attackers to obtain process control permissions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697
CVE ID: CVE-2022-38981 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-15T14:43:54.942Z Vendors: Huawei Products: HarmonyOS Problem Types: Out-of-bounds read vulnerability Description: The HwAirlink module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause information leakage. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697
CVE ID: CVE-2022-38982 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-15T14:40:47.239Z Vendors: Huawei Products: HarmonyOS Problem Types: Service logic error vulnerability Description: The fingerprint module has service logic errors.Successful exploitation of this vulnerability will cause the phone lock to be cracked. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697
CVE ID: CVE-2022-38983 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-15T14:39:58.607Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: UAF vulnerability Description: The BT Hfp Client module has a Use-After-Free (UAF) vulnerability.Successful exploitation of this vulnerability may result in arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697
CVE ID: CVE-2022-38984 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-15T14:38:09.407Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Out-of-bounds read vulnerability Description: The HIPP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which affects data confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697
CVE ID: CVE-2022-38985 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-15T14:10:19.908Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Input verification vulnerability Description: The facial recognition module has a vulnerability in input validation.Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697
CVE ID: CVE-2022-38986 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-15T14:04:55.254Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Out-of-bounds access vulnerability Description: The HIPP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause out-of-bounds access to the HIPP module and page table tampering, affecting device confidentiality and availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/se
es: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697
CVE ID: CVE-2022-38987 State: PUBLISHED Published: 2022-09-16T17:55:59 Last Updated: 2024-08-03T11:10:31.695Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Configuration defects Description: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845 - https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE ID: CVE-2022-38988 State: PUBLISHED Published: 2022-09-16T17:56:28 Last Updated: 2024-08-03T11:10:31.654Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Configuration defects Description: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845 - https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE ID: CVE-2022-38989 State: PUBLISHED Published: 2022-09-16T17:56:33 Last Updated: 2024-08-03T11:10:31.663Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Configuration defects Description: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845 - https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE ID: CVE-2022-38990 State: PUBLISHED Published: 2022-09-16T17:55:50 Last Updated: 2024-08-03T11:10:31.701Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Configuration defects Description: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845 - https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE ID: CVE-2022-38991 State: PUBLISHED Published: 2022-09-16T17:56:49 Last Updated: 2024-08-03T11:10:31.692Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Configuration defects Description: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845 - https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE ID: CVE-2022-38992 State: PUBLISHED Published: 2022-09-16T17:56:55 Last Updated: 2024-08-03T11:10:31.946Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Configuration defects Description: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845 - https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE ID: CVE-2022-38993 State: PUBLISHED Published: 2022-09-16T17:55:53 Last Updated: 2024-08-03T11:10:32.167Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Configuration defects Description: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845 - https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE ID: CVE-2022-38994 State: PUBLISHED Published: 2022-09-16T17:56:57 Last Updated: 2024-08-03T11:10:32.333Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Configuration defects Description: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845 - https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE ID: CVE-2022-38995 State: PUBLISHED Published: 2022-09-16T17:57:00 Last Updated: 2024-08-03T11:10:32.043Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Configuration defects Description: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845 - https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE ID: CVE-2022-38996 State: PUBLISHED Published: 2022-09-16T17:57:04 Last Updated: 2024-08-03T11:10:31.719Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Configuration defects Description: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845 - https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE ID: CVE-2022-38997 State: PUBLISHED Published: 2022-09-16T17:57:08 Last Updated: 2024-08-03T11:10:32.402Z Vendors: Huawei Products: HarmonyOS, EMUI, Magic UI Problem Types: Configuration defects Description: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845 - https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE ID: CVE-2022-38998 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-15T14:37:23.528Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Out-of-bounds read vulnerability Description: The HISP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which affects data confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697
CVE ID: CVE-2022-38999 State: PUBLISHED Published: 2022-09-16T17:57:38 Last Updated: 2024-08-03T11:10:32.489Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Improper update of reference count vulnerability Description: The AOD module has the improper update of reference count vulnerability. Successful exploitation of this vulnerability may affect data integrity, confidentiality, and availability. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845 - https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE ID: CVE-2022-39000 State: PUBLISHED Published: 2022-09-16T17:55:46 Last Updated: 2024-08-03T11:10:32.427Z Vendors: Huawei Products: HarmonyOS, EMUI, Magic UI Problem Types: Malicious app control vulnerability Description: The iAware module has a vulnerability in managing malicious apps.Successful exploitation of this vulnerability will cause malicious apps to automatically start upon system startup. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845 - https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE ID: CVE-2022-39001 State: PUBLISHED Published: 2022-09-16T17:57:48.000Z Last Updated: 2025-06-03T17:53:06.495Z Vendors: Huawei Products: HarmonyOS, EMUI, Magic UI Problem Types: Path traversal vulnerability Description: The number identification module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause data disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845 - https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE ID: CVE-2022-39002 State: PUBLISHED Published: 2022-09-16T00:00:00 Last Updated: 2024-08-03T11:10:31.671Z Vendors: n/a Products: HarmonyOS;EMUI;Magic UI Problem Types: Double free vulnerability Description: Double free vulnerability in the storage module. Successful exploitation of this vulnerability will cause the memory to be freed twice. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/9/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697
CVE ID: CVE-2022-39003 State: PUBLISHED Published: 2022-09-16T17:58:06 Last Updated: 2024-08-03T11:10:32.163Z Vendors: Huawei Products: EMUI, Magic UI Problem Types: Buffer overflow vulnerability Description: Buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability will affect the confidentiality and integrity of trusted components. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE ID: CVE-2022-39004 State: PUBLISHED Published: 2022-09-16T17:56:03 Last Updated: 2024-08-03T11:10:32.491Z Vendors: Huawei Products: HarmonyOS, EMUI, Magic UI Problem Types: Memory leak vulnerability Description: The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845 - https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE ID: CVE-2022-39005 State: PUBLISHED Published: 2022-09-16T17:56:07 Last Updated: 2024-08-03T11:10:32.354Z Vendors: Huawei Products: HarmonyOS, EMUI, Magic UI Problem Types: Memory leak vulnerability Description: The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845 - https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE ID: CVE-2022-39006 State: PUBLISHED Published: 2022-09-16T17:55:56 Last Updated: 2024-08-03T11:10:32.106Z Vendors: Huawei Products: HarmonyOS, EMUI, Magic UI Problem Types: Race condition vulnerability Description: The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability may cause the device to restart. Additional Analyst Notes: - CVE Program Container: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845 - https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE ID: CVE-2022-39007 State: PUBLISHED Published: 2022-09-16T17:57:45.000Z Last Updated: 2025-06-03T17:54:38.055Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permission verification bypass vulnerability Description: The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause privilege escalation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845 - https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE ID: CVE-2022-39008 State: PUBLISHED Published: 2022-09-16T17:55:34.000Z Last Updated: 2025-06-03T17:55:32.185Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Bundle serialization/deserialization mismatch vulnerability Description: The NFC module has bundle serialization/deserialization vulnerabilities. Successful exploitation of this vulnerability may cause third-party apps to read and write files that are accessible only to system apps. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845 - https://consumer.huawei.com/en/support/bulletin/2