CVE-2022-39003

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

Buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability will affect the confidentiality and integrity of trusted components.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published: Sep 16, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-390047.5The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks.CVE-2022-390057.5The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks.CVE-2022-390065.9The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability may cause the device to restart.CVE-2022-390079.8The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause privile CVE-2022-390089.1The NFC module has bundle serialization/deserialization vulnerabilities. Successful exploitation of this vulnerability may cause third-party CVE-2022-390099.8The WLAN module has a vulnerability in permission verification. Successful exploitation of this vulnerability may cause third-party apps to CVE-2022-39016.1Prototype Pollution in Visioweb.js 1.10.6 allows attackers to execute XSS on the client system.CVE-2022-390107.5The HwChrService module has a vulnerability in permission control. Successful exploitation of this vulnerability may cause disclosure of use CVE-2022-390117.5The HISP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulne CVE-2022-390127.5Huawei Aslan Children's Watch has an improper input validation vulnerability. Successful exploitation may cause the watch's application serv CVE-2022-390137.6Under certain conditions an authenticated attacker can get access to OS credentials. Getting access to OS credentials enables the attacker t CVE-2022-390145.3Under certain conditions SAP BusinessObjects Business Intelligence Platform Central Management Console (CMC) - version 430, allows an attack