PT-2022-24655 · Unknown · Aod Module

Published 2022-09-16 · Updated 2022-09-20 · CVE-2022-38999

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AOD module (affected versions not specified)

Description The AOD module has an improper update of reference count issue. Successful exploitation of this issue may affect data integrity, confidentiality, and availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2022-38999

Affected Products

Aod Module

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-38999 · Security Note
• https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845 · Vendor Advisory
• https://consumer.huawei.com/en/support/bulletin/2022/9 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-38999 · Vendor Advisory
• https://t.me/cvenotify/36535 · Telegram Post
• https://t.me/cibsecurity/49974 · Telegram Post