high7.5
CVE-2022-48298
The geofencing kernel code does not verify the length of the input data.
Impact
The geofencing kernel code does not verify the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounds memory access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Emui | Version 12.0.1 |
| Huawei | Harmonyos | Versions 2.0, 3.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://consumer.huawei.com/en/support/bulletin/2023/2/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474
- https://consumer.huawei.com/en/support/bulletin/2023/2/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474