CVE-2022-48298: High severity emui 5.0 vulnerability
The geofencing kernel code does not verify the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounds memory access.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2022-48298?
CVE-2022-48298 is a vulnerability in the geofencing kernel code of Huawei Emui 12.0.1, Huawei Harmonyos 2.0, and Huawei Harmonyos 3.0.0 that allows for successful exploitation leading to out-of-bounds memory access.
How severe is CVE-2022-48298?
CVE-2022-48298 has a severity level of high with a CVSS score of 7.5.
What software versions are affected by CVE-2022-48298?
CVE-2022-48298 affects Huawei Emui 12.0.1, Huawei Harmonyos 2.0, and Huawei Harmonyos 3.0.0.
How can CVE-2022-48298 be exploited?
CVE-2022-48298 can be exploited by sending input data with a length that is not properly verified, leading to out-of-bounds memory access.
Are there any references for CVE-2022-48298?
Yes, you can find more information about CVE-2022-48298 in the following references: [Huawei Support Bulletin](https://consumer.huawei.com/en/support/bulletin/2023/2/) and [HarmonyOS Security Bulletins](https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474).