CVE-2022-22252: Use After Free

Published May 13, 2022

Updated

The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect system stability.

Affected Software

11 affected components

Huawei Emui=10.0.0

Huawei Emui=10.1.0

Huawei Emui=10.1.1

Huawei Emui=11.0.0

Huawei Emui=11.0.1

Huawei Emui=12.0.0

Huawei Harmonyos=2.0

Huawei Magic Ui=3.0.0

Huawei Magic Ui=3.1.0

Huawei Magic Ui=3.1.1

Huawei Magic Ui=4.0.0

Event History

May 13, 2022

CVE Published

via MITRE·03:10 PM

Data Sourced

via MITRE·03:10 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2022-22252?

The severity of CVE-2022-22252 is high with a CVSS score of 7.5.

Which software versions are affected by CVE-2022-22252?

The affected software versions include Huawei Emui 10.0.0, Emui 10.1.0, Emui 10.1.1, Emui 11.0.0, Emui 11.0.1, Emui 12.0.0, Harmonyos 2.0, Huawei Magic Ui 3.0.0, Magic Ui 3.1.0, and Magic Ui 3.1.1.

What is the vulnerability description of CVE-2022-22252?

CVE-2022-22252 is a UAF (Use-After-Free) vulnerability in the DFX module, which could potentially impact system stability.

How can CVE-2022-22252 be exploited?

Successful exploitation of CVE-2022-22252 can result in system stability issues.

Where can I find more information about CVE-2022-22252?

More information about CVE-2022-22252 can be found in the security bulletins published by Huawei: [Bulletin 1](https://consumer.huawei.com/en/support/bulletin/2022/4/) and [Bulletin 2](https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202204-0000001224076294).