CVE-2022-41594
14.10.2022, 16:15
The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.Enginsight
| Vendor | Product | Version |
|---|---|---|
| huawei | emui | 11.0.1 |
| huawei | emui | 12.0.0 |
| huawei | harmonyos | 2.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-125 - Out-of-bounds ReadThe software reads data past the end, or before the beginning, of the intended buffer.
- CWE-476 - NULL Pointer DereferenceA NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
References