CVE-2022-38999

The AOD module has the improper update of reference count vulnerability. Successful exploitation of this vulnerability may affect data integrity, confidentiality, and availability.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
huaweiCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 32%
VendorProductVersion
huaweiemui
12.0.0
huaweiharmonyos
2.0
𝑥
= Vulnerable software versions
References
https://consumer.huawei.com/en/support/bulletin/2022/9/
https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845
https://consumer.huawei.com/en/support/bulletin/2022/9/
https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845