First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-38995

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

Vendor	Product	Versions
Huawei	HarmonyOS	2.0; 2.1
Huawei	EMUI	12.0.0

References

https://consumer.huawei.com/en/support/bulletin/2022/9/Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845Vendor Advisory
https://consumer.huawei.com/en/support/bulletin/2022/9/Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845Vendor Advisory

Timeline

Published: Sep 16, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-389967.5The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability.CVE-2022-389977.5The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality.CVE-2022-389987.5The HISP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability CVE-2022-389999.8The AOD module has the improper update of reference count vulnerability. Successful exploitation of this vulnerability may affect data integ CVE-2022-39009.8The Cooked Pro WordPress plugin before 1.7.5.7 does not properly validate or sanitize the recipe_args parameter before unserializing it in t CVE-2022-390009.8The iAware module has a vulnerability in managing malicious apps.Successful exploitation of this vulnerability will cause malicious apps to CVE-2022-390017.5The number identification module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause data disclosure CVE-2022-390029.8Double free vulnerability in the storage module. Successful exploitation of this vulnerability will cause the memory to be freed twice.CVE-2022-390039.1Buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability will affect the confidentiality and inte CVE-2022-390047.5The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks.CVE-2022-390057.5The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks.CVE-2022-390065.9The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability may cause the device to restart.