CVE-2022-44549

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The LBS module has a vulnerability in geofencing API access. Successful exploitation of this vulnerability may cause third-party apps to access the geofencing APIs without authorization, affecting user confidentiality.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-862

Affected software

Vendor	Product	Versions
Huawei	HarmonyOS	2.0; 2.1
Huawei	EMUI	12.0.1; 12.0.0; 11.0.1

References

https://consumer.huawei.com/en/support/bulletin/2022/11/Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433Vendor Advisory
https://consumer.huawei.com/en/support/bulletin/2022/11/Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433Vendor Advisory

Timeline

Published: Nov 9, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-44556.1A vulnerability was identified in sproctor php-calendar up to 2.0.13. This impacts an unknown function of the file index.php. Such manipulat CVE-2022-445507.5The graphics display module has a UAF vulnerability when traversing graphic layers. Successful exploitation of this vulnerability may affect CVE-2022-445519.8The iaware module has a vulnerability in thread security. Successful exploitation of this vulnerability will affect confidentiality, integri CVE-2022-445527.5The lock screen module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availab CVE-2022-445535.3The HiView module has a vulnerability of not filtering third-party apps out when the HiView module traverses to invoke the system provider. CVE-2022-445547.5The power module has a vulnerability in permission verification. Successful exploitation of this vulnerability may cause abnormal status of CVE-2022-445557.5The DDMP/ODMF module has a service hijacking vulnerability. Successful exploit of this vulnerability may cause services to be unavailable.CVE-2022-445567.5Missing parameter type validation in the DRM module. Successful exploitation of this vulnerability may affect availability.CVE-2022-445577.5The SmartTrimProcessEvent module has a vulnerability of obtaining the read and write permissions on arbitrary system files. Successful explo CVE-2022-445589.8The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privil CVE-2022-445599.8The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privil CVE-2022-44566.1A vulnerability has been found in falling-fruit and classified as problematic. This vulnerability affects unknown code. The manipulation lea