Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-48246 State: PUBLISHED Published: 2023-05-09T01:21:03.152Z Last Updated: 2025-01-28T19:32:28.978Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48247 State: PUBLISHED Published: 2023-05-09T01:21:04.269Z Last Updated: 2025-01-28T19:31:22.995Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48248 State: PUBLISHED Published: 2023-05-09T01:21:06.367Z Last Updated: 2025-01-28T19:30:06.794Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48249 State: PUBLISHED Published: 2023-05-09T01:21:07.453Z Last Updated: 2025-01-28T19:28:44.178Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48250 State: PUBLISHED Published: 2023-05-09T01:21:08.585Z Last Updated: 2025-01-28T19:27:21.750Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48251 State: PUBLISHED Published: 2023-01-10T00:00:00 Last Updated: 2024-08-03T15:10:59.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AES instructions on the ARMv8 platform do not have an algorithm that is "intrinsically resistant" to side-channel attacks. NOTE: the vendor reportedly offers the position "while power side channel attacks ... are possible, they are not directly caused by or related to the Arm architecture." Additional Analyst Notes: - CVE Program Container: References: - https://eshard.com/posts/sca-attacks-on-armv8 - https://eprint.iacr.org/2022/230
CVE ID: CVE-2022-48252 State: PUBLISHED Published: 2023-01-11T00:00:00.000Z Last Updated: 2025-04-08T20:13:31.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jokob-sk/Pi.Alert fork (before 22.12.20) of Pi.Alert allows Remote Code Execution via nmap_scan.php (scan parameter) OS Command Injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jokob-sk/Pi.Alert/security/advisories/GHSA-vhg3-f6gv-j89r
CVE ID: CVE-2022-48253 State: PUBLISHED Published: 2023-01-11T00:00:00.000Z Last Updated: 2025-04-08T19:59:23.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote server. The vulnerability occurs when the homedirs option is used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nazgul.ch/dev/nostromo_cl.txt - https://www.soteritsecurity.com/blog/2023/01/nostromo_from_directory_traversal_to_RCE.html
CVE ID: CVE-2022-48254 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-11T17:53:34.110Z Vendors: n/a Products: Leia-B29 Problem Types: Data Processing Error Description: There is a data processing error vulnerability in Leia-B29 2.0.0.49(M03). Successful exploitation could bypass lock screen authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-dpeviahb-44e16f60-en
CVE ID: CVE-2022-48255 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-11T17:50:13.523Z Vendors: n/a Products: BiSheng-WNM Problem Types: System Command Injection Description: There is a system command injection vulnerability in BiSheng-WNM FW 3.0.0.325. A Huawei printer has a system command injection vulnerability. Successful exploitation could lead to remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-sciviahpp-f18e962a-en
CVE ID: CVE-2022-48256 State: PUBLISHED Published: 2023-01-13T00:00:00.000Z Last Updated: 2025-04-07T15:40:46.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: Technitium DNS Server before 10.0 allows a self-CNAME denial-of-service attack in which a CNAME loop causes an answer to contain hundreds of records. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md#version-100
CVE ID: CVE-2022-48257 State: PUBLISHED Published: 2023-01-13T00:00:00.000Z Last Updated: 2025-11-04T17:12:25.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/MisterTea/EternalTerminal/issues/555 - https://github.com/MisterTea/EternalTerminal/pull/556 - http://www.openwall.com/lists/oss-security/2023/02/16/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6MO4FSKYNSAJVUXYP7LRY7ARUIGKBFL/ - https://lists.fedoraproject.org/archives/l
nnounce%40lists.fedoraproject.org/message/U6MO4FSKYNSAJVUXYP7LRY7ARUIGKBFL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2RY6PKBU73I45L6YWNYCUK2XBEXEFX7L/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYODHZECXYFC2BNODZPZXZAXOKGMCYAP/
CVE ID: CVE-2022-48258 State: PUBLISHED Published: 2023-01-13T00:00:00.000Z Last Updated: 2025-11-04T17:12:26.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MisterTea/EternalTerminal/issues/555 - https://github.com/MisterTea/EternalTerminal/pull/556 - http://www.openwall.com/lists/oss-security/2023/02/16/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6MO4FSKYNSAJVUXYP7LRY7ARUIGKBFL/ - https://lists.fedoraproject.org/archives/list/packag
lists.fedoraproject.org/message/U6MO4FSKYNSAJVUXYP7LRY7ARUIGKBFL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2RY6PKBU73I45L6YWNYCUK2XBEXEFX7L/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYODHZECXYFC2BNODZPZXZAXOKGMCYAP/
CVE ID: CVE-2022-48259 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-11T17:48:25.792Z Vendors: n/a Products: BiSheng-WNM Problem Types: System Command Injection Description: There is a system command injection vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could allow attackers to gain higher privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-sciviahpp-4181d272-en
CVE ID: CVE-2022-48260 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-11T17:47:52.902Z Vendors: n/a Products: BiSheng-WNM Problem Types: Buffer Overflow Description: There is a buffer overflow vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to device service exceptions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-boviahpp-7a1783e1-en
CVE ID: CVE-2022-48261 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-11T17:47:07.289Z Vendors: n/a Products: BiSheng-WNM Problem Types: Misinterpretation of Input Description: There is a misinterpretation of input vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation of this vulnerability may cause the printer service to be abnormal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-moivihp-5deb7c23-en
CVE ID: CVE-2022-48279 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T18:43:26.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SpiderLabs/ModSecurity/releases/tag/v2.9.6 - https://github.com/SpiderLabs/ModSecurity/pull/2797 - https://github.com/SpiderLabs/ModSecurity/release
ses/tag/v2.9.6 - https://github.com/SpiderLabs/ModSecurity/pull/2797 - https://github.com/SpiderLabs/ModSecurity/releases/tag/v3.0.8 - https://github.com/SpiderLabs/ModSecurity/pull/2795 - https://coreruleset.org/20220919/crs-version-3-3-3-and-3-2-2-covering-several-cves/ - https://lists.debian.org/debian-lts-announce/2023/01/msg00023.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WCH6JM4I4MD4YABYFHSBDDOUFDGIFJKL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/52TGCZCOHYBDCVWJYNN2PS4QLOHCXWTQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/m
COHYBDCVWJYNN2PS4QLOHCXWTQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SYRTXTOQQI6SB2TLI5QXU76DURSLS4XI/
CVE ID: CVE-2022-48281 State: PUBLISHED Published: 2023-01-23T00:00:00.000Z Last Updated: 2025-04-03T14:04:15.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/libtiff/libtiff/-/issues/488 - https://gitlab.com/libtiff/libtiff/-/commit/d1b6b9c1b3cae2d9e37754506c1ad8f4f7b646b5 - https://www.debian.org/security/2023/dsa-5333 - https://lists.debian.org/debian-lts-announce/2023/01/msg00037.html - https://security.netapp.c
/security/2023/dsa-5333 - https://lists.debian.org/debian-lts-announce/2023/01/msg00037.html - https://security.netapp.com/advisory/ntap-20230302-0004/ - https://security.gentoo.org/glsa/202305-31
CVE ID: CVE-2022-48282 State: PUBLISHED Published: 2023-02-21T18:35:11.643Z Last Updated: 2025-03-11T19:20:08.556Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: MongoDB Inc Products: MongoDB .NET/C# Driver Problem Types: CWE-502 Description: Under very specific circumstances (see Required configuration section below), a privileged user is able to cause arbitrary code to be executed which may cause further disruption to services. This is specific to applications written in C#. This affects all MongoDB .NET/C# Driver versions prior to and including v2.18.0 Following configuration must be true for the vulnerability to be applicable: * Application must written
ncluding v2.18.0 Following configuration must be true for the vulnerability to be applicable: * Application must written in C# taking arbitrary data from users and serializing data using _t without any validation AND * Application must be running on a Windows host using the full .NET Framework, not .NET Core AND * Application must have domain model class with a property/field explicitly of type System.Object or a collection of type System.Object (against MongoDB best practice) AND * Malicious attacker must have unrestricted insert access to target database to add a _t discriminator."Following configuration must be true for the vulnerability to be applicable Additional Analyst Notes: - CVE Pr
iminator."Following configuration must be true for the vulnerability to be applicable Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jira.mongodb.org/browse/CSHARP-4475 - https://github.com/mongodb/mongo-csharp-driver/releases/tag/v2.19.0
CVE ID: CVE-2022-48283 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-11T17:45:20.020Z Vendors: n/a Products: HarmonyOS AILife Solution 6.0 Problem Types: Incorrect Privilege Assignment Description: A piece of Huawei whole-home intelligence software has an Incorrect Privilege Assignment vulnerability. Successful exploitation of this vulnerability could allow attackers to access restricted functions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-ipavihwhis-1afe7781-en
CVE ID: CVE-2022-48284 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-11T17:44:23.893Z Vendors: n/a Products: HarmonyOS AILife Solution 6.0 Problem Types: Incorrect Privilege Assignment Description: A piece of Huawei whole-home intelligence software has an Incorrect Privilege Assignment vulnerability. Successful exploitation of this vulnerability could allow attackers to access restricted functions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-ipavihwhis-1556afc2-en
CVE ID: CVE-2022-48285 State: PUBLISHED Published: 2023-01-29T00:00:00 Last Updated: 2024-08-03T15:10:59.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: loadAsync in JSZip before 3.8.0 allows Directory Traversal via a crafted ZIP archive. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Stuk/jszip/commit/2edab366119c9ee948357c02f1206c28566cdf15 - https://www.mend.io/vulnerability-database/WS-2023-0004 - https://exchange.xforce.ibmcloud.com/vulnerabilities/244499 - https://github.com/Stuk/jszip/compare/v3.7.1...v3.8.0 - https://security.netapp.com/advisory/ntap-20240621-0005/
CVE ID: CVE-2022-48286 State: PUBLISHED Published: 2023-02-09T00:00:00.000Z Last Updated: 2025-03-25T13:42:25.761Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Unauthorized access vulnerability Description: The multi-screen collaboration module has a privilege escalation vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474 - https://consumer.huawei.com/en/support/bulletin/2023/2/
CVE ID: CVE-2022-48287 State: PUBLISHED Published: 2023-02-09T00:00:00.000Z Last Updated: 2025-03-24T20:45:30.269Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Logic bypass vulnerability Description: The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect data integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474 - https://consumer.huawei.com/en/support/bulletin/2023/2/
CVE ID: CVE-2022-48288 State: PUBLISHED Published: 2023-02-09T00:00:00.000Z Last Updated: 2025-03-24T20:44:11.768Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Improper authentification vulnerability Description: The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474 - https://consumer.huawei.com/en/support/bulletin/2023/2/
CVE ID: CVE-2022-48289 State: PUBLISHED Published: 2023-02-09T00:00:00.000Z Last Updated: 2025-03-24T20:43:27.050Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Improper authentification vulnerability Description: The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474 - https://consumer.huawei.com/en/support/bulletin/2023/2/
CVE ID: CVE-2022-48290 State: PUBLISHED Published: 2023-02-09T00:00:00.000Z Last Updated: 2025-03-24T20:42:33.810Z Vendors: Huawei Products: HarmonyOS Problem Types: Logic bypass vulnerability Description: The phone-PC collaboration module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect data confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474 - https://consumer.huawei.com/en/support/bulletin/2023/2/
CVE ID: CVE-2022-48291 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-19T18:37:21.694Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Authentication bypass vulnerability Description: The Bluetooth module has an authentication bypass vulnerability in the pairing process. Successful exploitation of this vulnerability may affect confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505 - https://consumer.huawei.com/en/support/bulletin/2023/3/
CVE ID: CVE-2022-48292 State: PUBLISHED Published: 2023-02-09T00:00:00.000Z Last Updated: 2025-03-24T20:41:15.744Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: OOM vulnerability Description: The Bluetooth module has an out-of-memory (OOM) vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474 - https://consumer.huawei.com/en/support/bulletin/2023/2/
CVE ID: CVE-2022-48293 State: PUBLISHED Published: 2023-02-09T00:00:00.000Z Last Updated: 2025-03-24T20:39:54.079Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: OOM vulnerability Description: The Bluetooth module has an OOM vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474 - https://consumer.huawei.com/en/support/bulletin/2023/2/
CVE ID: CVE-2022-48294 State: PUBLISHED Published: 2023-02-09T00:00:00.000Z Last Updated: 2025-03-24T20:38:57.546Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Improper authentification vulnerability Description: The IHwAttestationService interface has a defect in authentication. Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474 - https://consumer.huawei.com/en/support/bulletin/2023/2/
CVE ID: CVE-2022-48295 State: PUBLISHED Published: 2023-02-09T00:00:00.000Z Last Updated: 2025-03-25T13:52:16.750Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Improper authentification vulnerability Description: The IHwAntiMalPlugin interface lacks permission verification. Successful exploitation of this vulnerability can lead to filling problems (batch installation of applications). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474 - https://consumer.huawei.com/en/support/bulletin/2023/2/
CVE ID: CVE-2022-48296 State: PUBLISHED Published: 2023-02-09T00:00:00.000Z Last Updated: 2025-03-25T13:51:20.795Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Improper permission management vulnerability Description: The SystemUI has a vulnerability in permission management. Successful exploitation of this vulnerability may cause users to receive broadcasts from malicious apps, conveying false alarm information about external storage devices. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474 - https://consumer.huawei.com/en/support/bulletin/2023
n/docs/security/update/security-bulletins-202302-0000001454769474 - https://consumer.huawei.com/en/support/bulletin/2023/2/
CVE ID: CVE-2022-48297 State: PUBLISHED Published: 2023-02-09T00:00:00.000Z Last Updated: 2025-03-25T13:50:13.584Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Out-of-bounds memory access vulnerability Description: The geofencing kernel code has a vulnerability of not verifying the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounds memory access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474 - https://consumer.huawei.com/en/support/bulletin/2023/2/
CVE ID: CVE-2022-48298 State: PUBLISHED Published: 2023-02-09T00:00:00.000Z Last Updated: 2025-03-25T13:28:48.770Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Out-of-bounds memory access vulnerability Description: The geofencing kernel code does not verify the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounds memory access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474 - https://consumer.huawei.com/en/support/bulletin/2023/2/