CVE-2022-38998: High severity emui 5.0 vulnerability

Published Oct 14, 2022

Updated

The HISP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which affects data confidentiality.

Affected Software

2 affected components

Huawei Emui=12.0.0

Huawei Harmonyos=2.0

Event History

Oct 14, 2022

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2022-38998?

CVE-2022-38998 has been classified as a high severity vulnerability due to its potential to impact data confidentiality.

How do I fix CVE-2022-38998?

To mitigate CVE-2022-38998, users should update their devices to the latest software version that addresses this vulnerability.

What types of devices are affected by CVE-2022-38998?

CVE-2022-38998 affects devices running Huawei EMUI version 12.0.0 and Huawei HarmonyOS version 2.0.

What kind of attack does CVE-2022-38998 facilitate?

CVE-2022-38998 facilitates out-of-bounds read attacks, which can lead to unauthorized access to sensitive data.

Is there a specific patch for CVE-2022-38998?

Yes, a patch for CVE-2022-38998 is included in the latest software updates provided by Huawei.