CVE-2022-39008

Description

The NFC module has bundle serialization/deserialization vulnerabilities. Successful exploitation of this vulnerability may cause third-party apps to read and write files that are accessible only to system apps.

References

https://github.com/Live-Hack-CVE/CVE-2022-39008

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-41554

https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845

https://consumer.huawei.com/en/support/bulletin/2022/9/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS