CVE-2022-41596

HIGH

System Tool - Use After Free

Title source: llm

Description

The system tool has inconsistent serialization and deserialization. Successful exploitation of this vulnerability will cause unauthorized startup of components.

References (2)

Scores

CVSS v3 7.5
EPSS 0.0021
EPSS Percentile 43.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Classification

CWE
CWE-502
Status published

Affected Products (4)

huawei/harmonyos < 2.1
huawei/emui
huawei/emui
huawei/emui

Timeline

Published Dec 20, 2022
Tracked Since Feb 18, 2026