First published: Wed Nov 09 2022(Updated: )
The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation.
Credit: psirt@huawei.com psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei HarmonyOS | =2.0 | |
Huawei HarmonyOS | =2.1 | |
Huawei HarmonyOS | =3.0.0 | |
Huawei EMUI | =11.0.1 | |
Huawei EMUI | =12.0.0 | |
Huawei EMUI | =12.0.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-44559 has a moderate severity level due to its potential for privilege escalation.
To fix CVE-2022-44559, update to the latest patched version of the affected Huawei HarmonyOS or EMUI software.
CVE-2022-44559 affects Huawei HarmonyOS versions 2.0, 2.1, and 3.0.0, as well as EMUI versions 11.0.1, 12.0.0, and 12.0.1.
Yes, CVE-2022-44559 can potentially be exploited remotely, allowing attackers to escalate privileges.
CVE-2022-44559 involves a serialization/deserialization mismatch, which can lead to security issues.