CVE-2022-48478

9.8 criticalEPSS 0.5%

Critical (9.8) in huawei harmonyos. EPSS 0.5% chance of exploitation in the next 30 days.

The facial recognition TA of some products lacks memory length verification. Successful exploitation of this vulnerability may cause exceptions of the facial recognition service.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
Published: 2023-05-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

huawei:harmonyos

References

https://device.harmonyos.com/en/docs/security/update/security-bulletins-202305-0000001532778780
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202305-0000001532778780

Check your stack JSON