Design/Logic Flaw

The communication module has a vulnerability of improper permission preservation. Successful exploitation of this vulnerability may affect system availability...

CVE-2022-31753

The CVE-2022-31753 entry describes a vulnerability in the voice wakeup module where externally-controlled format strings can be exploited, potentially impacting system availability. Connected sources attribute the issue to Huawei/HarmonyOS implementations (notably HarmonyOS 2.0) and reiterate tha...

CVE-2022-31753

The voice wakeup module has a vulnerability of using externally-controlled format strings. Successful exploitation of this vulnerability may affect system availability...

CVE-2022-31759

AppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this vulnerability may affect system availability...

CVE-2022-31759

CVE-2022-31759 concerns AppLink with a vulnerability in which an access to uninitialized pointers can be exploited, potentially impacting system availability. The available sources repeatedly cite this as a vulnerability in AppLink, with impact described as reduced availability. The CVSS details ...

CVE-2022-31755

The communication module has a vulnerability of improper permission preservation. Successful exploitation of this vulnerability may affect system availability...

CVE-2022-31751

The CVE-2022-31751 entry concerns a multi-thread contention issue in the kernel emcom module, with availability impact. Connected documents consistently identify HarmonyOS (notably HarmonyOS 2.0) as the affected platform and attribute the problem to resource contention in the kernel emcom module,...

CVE-2022-31751

The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability may affect system availability...

CVE-2022-31763

The kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful exploitation of this vulnerability may affect system availability...

CVE-2022-31763

CVE-2022-31763 relates to Huawei HarmonyOS, describing a kernel-module vulnerability with null-pointer dereference and array-out-of-bounds conditions. The issue is reported to potentially affect system availability if exploited. The Red Hat, NVD, and other feeds reiterate the same kernel-level ro...

CVE-2021-46814

The CVE-2021-46814 entry concerns Huawei HarmonyOS’ video framework, described as having an out-of-bounds memory read/write vulnerability that can affect system availability when exploited. Connected sources corroborate a vulnerability in the video framework with out-of-bounds memory access as th...

CVE-2021-46814

The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability may affect system availability...

PT-2022-20902 · Unknown · Kernel Emcom Module

Name of the Vulnerable Software and Affected Versions: kernel emcom module affected versions not specified Description: The issue is related to multi-thread contention in the kernel emcom module. Successful exploitation of this issue may affect system availability. Recommendations: At the moment,...

PT-2022-20906 · Huawei · Emui +2

Name of the Vulnerable Software and Affected Versions: Communication module affected versions not specified Description: The issue is related to improper permission preservation in the communication module. Successful exploitation may affect system availability. Recommendations: At the moment,...

Command injection

A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after command execution, and it is read in a...

CVE-2022-1708

CVE-2022-1708 affects CRI-O and causes memory or disk exhaustion on the node when handling large output from ExecSync. The vulnerability arises from CRI-O reading the entire command output after execution, which can exhaust node resources and impact availability. Connected advisories indicate aff...

CVE-2022-1708

A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after command execution, and it is read in a...

CVE-2022-1708

A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after command execution, and it is read in a...

nodejs-tar: Insufficient symlink protection due to directory cache poisoning using symbolic links allowing arbitrary file creation and overwrite

A flaw was found in the npm package "tar" aka node-tar. Extracting tar files that contain two directories and a symlink with names containing Unicode values that normalize to the same value on Windows systems made it possible to bypass node-tar symlink checks on directories. This allows an...

CVE-2022-1708

A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after command execution, and it is read in a...