Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
O EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a stored XSS on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 5.9.21 and below, versions 6.0.11 and below and TIBCO Product and Service Catalog powered by TIBCO EBX: versions 1.2.0 and below. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories
CVE ID: CVE-2022-41566 State: PUBLISHED Published: 2023-02-22T00:00:00 Last Updated: 2024-08-03T12:49:41.888Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: TIBCO Software Inc. Products: TIBCO EBX Add-ons Problem Types: The impact of this vulnerability includes the theoretical possibility of unauthorized access to TIBCO EBX® Add-ons data. This includes the ability to update, insert, or delete data. Description: The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute stored XSS on the affected system. Affected releases are TIBCO Software In
leged attacker with network access to execute stored XSS on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions 5.6.0 and below. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories
CVE ID: CVE-2022-41567 State: PUBLISHED Published: 2023-02-22T00:00:00.000Z Last Updated: 2025-03-12T15:03:44.452Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: TIBCO Software Inc. Products: TIBCO BusinessConnect Problem Types: Successful execution of this attack could result in the ability to perform actions within the context of another user including reading, updating, inserting, or deleting data accessible to TIBCO BusinessConnect. Description: The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a cross-site script
asily exploitable vulnerability that allows a low privileged attacker with network access to execute a cross-site scripting (XSS) attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO BusinessConnect: versions 7.3.0 and below. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tibco.com/services/support/advisories
CVE ID: CVE-2022-41568 State: PUBLISHED Published: 2022-11-29T00:00:00.000Z Last Updated: 2025-04-25T17:21:40.862Z Vendors: LINE Corporation Products: LINE client for iOS Problem Types: na Description: LINE client for iOS before 12.17.0 might be crashed by sharing an invalid shared key of e2ee in group chat. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/1701642
CVE ID: CVE-2022-41570 State: PUBLISHED Published: 2022-09-27T01:53:21.000Z Last Updated: 2025-05-21T15:27:02.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Unauthenticated SQL injection can occur. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/EyesOfNetworkCommunity/eonweb/issues/120
CVE ID: CVE-2022-41571 State: PUBLISHED Published: 2022-09-27T01:53:53.000Z Last Updated: 2025-05-21T18:28:42.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Local file inclusion can occur. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/EyesOfNetworkCommunity/eonweb/issues/120
CVE ID: CVE-2022-41572 State: PUBLISHED Published: 2025-01-07T00:00:00 Last Updated: 2025-01-08T15:08:14.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Privilege escalation can be accomplished on the server because nmap can be run as root. The attacker achieves total control over the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/EyesOfNetworkCommunity/eonweb/issues/120 - https://github.com/Orange-Cyberdefense/CVE-repository/
CVE ID: CVE-2022-41573 State: PUBLISHED Published: 2025-01-07T00:00:00 Last Updated: 2025-01-08T15:06:32.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Ovidentia 8.3. The file upload feature does not prevent the uploading of executable files. A user can upload a .png file containing PHP code and then rename it to have the .php extension. It will then be accessible at an images/common/ URI for remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bitbucket.org/cantico/ovidentia/branches/ - https://github.com/Orange-Cyberdefense/CVE-repository/ - https://github.com/Orange-Cyberdefense/CVE-repository/blob/mast
https://github.com/Orange-Cyberdefense/CVE-repository/ - https://github.com/Orange-Cyberdefense/CVE-repository/blob/master/PoCs/poc_CVE-2022-41573.txt
CVE ID: CVE-2022-41574 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T12:49:42.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access-control vulnerability in Gradle Enterprise 2022.4 through 2022.3.1 allows remote attackers to prevent backups from occurring, and send emails with arbitrary text content to the configured installation-administrator contact address, via HTTP access to an accidentally exposed internal endpoint. This is fixed in 2022.3.2. Additional Analyst Notes: - CVE Program Container: References: - https://security.gradle.com - https://security.gradle.com/advisory/2022-12
CVE ID: CVE-2022-41575 State: PUBLISHED Published: 2022-10-21T00:00:00.000Z Last Updated: 2025-05-07T14:36:04.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: A credential-exposure vulnerability in the support-bundle mechanism in Gradle Enterprise 2022.3 through 2022.3.3 allows remote attackers to access a subset of application data (e.g., cleartext credentials). This is fixed in 2022.3.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.gradle.com - https://security.gradle.com/advisory/2022-13
CVE ID: CVE-2022-41576 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T15:05:34.826Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Weaknesses Introduced During Design Description: The rphone module has a script that can be maliciously modified.Successful exploitation of this vulnerability may cause irreversible programs to be implanted on user devices. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697
CVE ID: CVE-2022-41577 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T14:48:22.568Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Out-of-bounds read vulnerability Description: The kernel server has a vulnerability of not verifying the length of the data transferred in the user space.Successful exploitation of this vulnerability may cause out-of-bounds read in the kernel, which affects the device confidentiality and availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phon
r.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697
CVE ID: CVE-2022-41578 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T20:30:13.407Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Out-of-bounds write vulnerability Description: The MPTCP module has an out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause root privilege escalation attacks implemented by modifying program information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697
CVE ID: CVE-2022-41579 State: PUBLISHED Published: 2022-12-28T00:00:00.000Z Last Updated: 2025-04-11T16:12:05.685Z Vendors: Huawei Products: HOTA-Fara-B19 Problem Types: Insufficient Authentication Description: There is an insufficient authentication vulnerability in some Huawei band products. Successful exploit could allow the attacker to spoof then connect to the band. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20221130-01-c7f72ffb-en
CVE ID: CVE-2022-41580 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T20:30:49.782Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Out-of-bounds access vulnerability Description: The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697
CVE ID: CVE-2022-41581 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T14:46:52.596Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Out-of-bounds access vulnerability Description: The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697
CVE ID: CVE-2022-41582 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T14:44:46.360Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Configuration defects Description: The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697
CVE ID: CVE-2022-41583 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T14:39:38.109Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Array out-of-bounds read vulnerability Description: The storage maintenance and debugging module has an array out-of-bounds read vulnerability.Successful exploitation of this vulnerability will cause incorrect statistics of this module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697
CVE ID: CVE-2022-41584 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T14:37:42.543Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Out-of-bounds read vulnerability Description: The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697
CVE ID: CVE-2022-41585 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T14:36:26.088Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Out-of-bounds read vulnerability Description: The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697
CVE ID: CVE-2022-41586 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T20:32:50.988Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Untruncated data vulnerability Description: The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697
CVE ID: CVE-2022-41587 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T19:44:38.381Z Vendors: n/a Products: EMUI Problem Types: Configuration defects Description: Uncaptured exceptions in the home screen module. Successful exploitation of this vulnerability may affect stability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/
CVE ID: CVE-2022-41588 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T20:36:58.249Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Service logic exception vulnerability Description: The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697
CVE ID: CVE-2022-41589 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T15:57:52.864Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Interface misuse vulnerability Description: The DFX unwind stack module of the ArkCompiler has a vulnerability in interface calling.Successful exploitation of this vulnerability affects system services and device availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697
CVE ID: CVE-2022-41590 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T18:26:07.570Z Vendors: Huawei Products: HarmonyOS Problem Types: Authentication-related vulnerability Description: Some smartphones have authentication-related (including session management) vulnerabilities as the setup wizard is bypassed. Successful exploitation of this vulnerability affects the smartphone availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397
CVE ID: CVE-2022-41591 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T18:23:04.889Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Path traversal vulnerability Description: The backup module has a path traversal vulnerability. Successful exploitation of this vulnerability causes unauthorized access to other system files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/12/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397
CVE ID: CVE-2022-41592 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T20:47:18.133Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Heap overflow/Out-of-bounds read/Null pointer vulnerability Description: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-000000
support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697
CVE ID: CVE-2022-41593 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T20:48:04.397Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Heap overflow/Out-of-bounds read/Null pointer vulnerability Description: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-000000
CVE ID: CVE-2022-41594 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T20:48:44.865Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Heap overflow/Out-of-bounds read/Null pointer vulnerability Description: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-000000
CVE ID: CVE-2022-41595 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T18:27:34.213Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Heap overflow/Out-of-bounds read/Null pointer vulnerability Description: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-000000
CVE ID: CVE-2022-41596 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T18:22:04.785Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Serialization/deserialization mismatch vulnerability Description: The system tool has inconsistent serialization and deserialization. Successful exploitation of this vulnerability will cause unauthorized startup of components. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/12/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397
CVE ID: CVE-2022-41597 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T18:14:50.707Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Heap overflow/Out-of-bounds read/Null pointer vulnerability Description: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-000000
CVE ID: CVE-2022-41598 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T15:49:55.354Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Heap overflow/Out-of-bounds read/Null pointer vulnerability Description: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-000000
CVE ID: CVE-2022-41599 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T18:22:27.580Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Incorrect return value vulnerability Description: The system service has a vulnerability that causes incorrect return values. Successful exploitation of this vulnerability may affect data confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/12/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397
CVE ID: CVE-2022-41600 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T14:33:56.181Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Heap overflow/Out-of-bounds read/Null pointer vulnerability Description: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-000000
CVE ID: CVE-2022-41601 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T14:31:56.815Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Heap overflow/Out-of-bounds read/Null pointer vulnerability Description: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-000000
CVE ID: CVE-2022-41602 State: PUBLISHED Published: 2022-10-14T00:00:00.000Z Last Updated: 2025-05-14T15:31:55.638Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Heap overflow/Out-of-bounds read/Null pointer vulnerability Description: The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-000000