CVE-2022-38999

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The AOD module has the improper update of reference count vulnerability. Successful exploitation of this vulnerability may affect data integrity, confidentiality, and availability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Sep 16, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-39009.8The Cooked Pro WordPress plugin before 1.7.5.7 does not properly validate or sanitize the recipe_args parameter before unserializing it in tCVE-2022-390009.8The iAware module has a vulnerability in managing malicious apps.Successful exploitation of this vulnerability will cause malicious apps to CVE-2022-390017.5The number identification module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause data disclosureCVE-2022-390029.8Double free vulnerability in the storage module. Successful exploitation of this vulnerability will cause the memory to be freed twice.CVE-2022-390039.1Buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability will affect the confidentiality and inteCVE-2022-390047.5The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks.CVE-2022-390057.5The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks.CVE-2022-390065.9The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability may cause the device to restart.CVE-2022-390079.8The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause privileCVE-2022-390089.1The NFC module has bundle serialization/deserialization vulnerabilities. Successful exploitation of this vulnerability may cause third-partyCVE-2022-390099.8The WLAN module has a vulnerability in permission verification. Successful exploitation of this vulnerability may cause third-party apps to CVE-2022-39016.1Prototype Pollution in Visioweb.js 1.10.6 allows attackers to execute XSS on the client system.
CVE-2022-38999: Critical severity, CVSS 9.8 | Vulnix