CVE-2022-41580

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Oct 14, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-415819.1The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause maliciousCVE-2022-415827.5The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability.CVE-2022-415837.5The storage maintenance and debugging module has an array out-of-bounds read vulnerability.Successful exploitation of this vulnerability wilCVE-2022-415847.8The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting.CVE-2022-415857.8The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting.CVE-2022-415867.5The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affCVE-2022-415875.3Uncaptured exceptions in the home screen module. Successful exploitation of this vulnerability may affect stability.CVE-2022-415887.5The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integriCVE-2022-415897.5The DFX unwind stack module of the ArkCompiler has a vulnerability in interface calling.Successful exploitation of this vulnerability affectCVE-2022-41596.5The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_id POST paraCVE-2022-415905.5Some smartphones have authentication-related (including session management) vulnerabilities as the setup wizard is bypassed. Successful explCVE-2022-415917.5The backup module has a path traversal vulnerability. Successful exploitation of this vulnerability causes unauthorized access to other syst
CVE-2022-41580: Critical severity, CVSS 9.8 | Vulnix