CVE-2022-48478

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The facial recognition TA of some products lacks memory length verification. Successful exploitation of this vulnerability may cause exceptions of the facial recognition service.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Huawei	HarmonyOS	2.0.0

References

Timeline

Published: May 26, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-484799.8The facial recognition TA of some products has the out-of-bounds memory read vulnerability. Successful exploitation of this vulnerability ma CVE-2022-48485.7Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1.CVE-2022-484807.5Integer overflow vulnerability in some phones. Successful exploitation of this vulnerability may affect service confidentiality.CVE-2022-484817.8In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible CVE-2022-484827.53CX before 18 Update 2 Security Hotfix build 18.0.2.315 on Windows allows unauthenticated remote attackers to read certain files via /Electr CVE-2022-484837.53CX before 18 Hotfix 1 build 18.0.3.461 on Windows allows unauthenticated remote attackers to read %WINDIR%\system32 files via /Electron/dow CVE-2022-484867.5Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.CVE-2022-484877.5Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.CVE-2022-484885.3Vulnerability of bypassing the default desktop security controls.Successful exploitation of this vulnerability may cause unauthorized modifi CVE-2022-484897.5Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.CVE-2022-48496.5Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.CVE-2022-484907.5Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.