CVE-2022-38984: High severity emui 5.0 vulnerability

Published Oct 14, 2022

Updated

The HIPP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which affects data confidentiality.

Affected Software

2 affected components

Huawei Emui=12.0.0

Huawei Harmonyos=2.0

Event History

Oct 14, 2022

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2022-38984?

CVE-2022-38984 is classified as a high-severity vulnerability due to its potential impact on data confidentiality.

How do I fix CVE-2022-38984?

To mitigate CVE-2022-38984, ensure that your Huawei device is updated to the latest version of the software that addresses this vulnerability.

What devices are affected by CVE-2022-38984?

CVE-2022-38984 affects Huawei EMUI 12.0.0 and HarmonyOS 2.0 systems.

What does CVE-2022-38984 exploit?

CVE-2022-38984 exploits a lack of data verification in the HIPP module, leading to potential out-of-bounds read scenarios.

What are the consequences of exploiting CVE-2022-38984?

Exploitation of CVE-2022-38984 could result in unauthorized access to sensitive data, compromising data confidentiality.