Lucene search

[email protected]CVE-2022-39002

HistorySep 16, 2022 - 6:15 p.m.

CVE-2022-39002

2022-09-1618:15:17

CWE-415

[email protected]

web.nvd.nist.gov

cve-2022-39002

double free vulnerability

storage module

memory exploitation

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.6%

JSON

Double free vulnerability in the storage module. Successful exploitation of this vulnerability will cause the memory to be freed twice.

Affected configurations

NVD

Node

huaweiemuiMatch11.0.0

huaweiharmonyosMatch2.0

huaweimagic_uiMatch4.0.0

CPENameOperatorVersion
huawei:emuihuawei emuieq11.0.0
huawei:harmonyoshuawei harmonyoseq2.0
huawei:magic_uihuawei magic uieq4.0.0

CPE	Name	Operator	Version
huawei:emui	huawei emui	eq	11.0.0
huawei:harmonyos	huawei harmonyos	eq	2.0
huawei:magic_ui	huawei magic ui	eq	4.0.0

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "HarmonyOS;EMUI;Magic UI",
    "versions": [
      {
        "version": "HarmonyOS 2.0",
        "status": "affected"
      },
      {
        "version": "EMUI 11.0.0",
        "status": "affected"
      },
      {
        "version": "Magic UI 4.0.0",
        "status": "affected"
      }
    ]
  }
]

References

consumer.huawei.com/en/support/bulletin/2022/9/

device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697

Social References

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.6%

JSON

Related for CVE-2022-39002

nvd1 prion1 cvelist1