high7.5
CVE-2022-37008
The recovery module has a vulnerability of bypassing the verification of an update package before use.
Impact
The recovery module has a vulnerability of bypassing the verification of an update package before use. Successful exploitation of this vulnerability may affect system stability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Emui | Versions 11.0.0, 11.0.1, 12.0.0 |
| Huawei | Harmonyos | Version 2.0 |
| Huawei | Magic Ui | Version 4.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://consumer.huawei.com/en/support/bulletin/2022/8/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202208-0000001363876177
- https://consumer.huawei.com/en/support/bulletin/2022/8/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202208-0000001363876177