Paper/Archive/CVE-2022-31760

CVE-2022-31760

Huawei HarmonyOS — Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services.

EPSS 0.7%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (NVD)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 51.9.519 × 2010.4 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerability may affect data integrity and confidentiality.

Affected

ProductAffectedFixed inSource

HarmonyOS2.0–CNA

EMUI10.1.0–CNA

EMUI10.1.1–CNA

EMUI11.0.0–CNA

EMUI12.0.0–CNA

Magic UI3.1.0–CNA

Magic UI3.1.1–CNA

Magic UI4.0.0–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References

refconsumer.huawei.com/en/support/bulletin/2022/6 refdevice.harmonyos.com/en/docs/security/update/security-bulletins-phones-202206-0000001270350482