CVE-2022-38985 - The facial recognition module has a vulnerability in input validation.Successful exploitation of this vulnerability may affect data confidentiality

HIGH

The facial recognition module has a vulnerability in input validation.Successful exploitation of this vulnerability may affect data confidentiality

Published Oct 14, 2022

7.5

HIGH

CVSS 3.1

EPSS 0.47%

The facial recognition module has a vulnerability in input validation.Successful exploitation of this vulnerability may affect data confidentiality.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
12.0.0	affected	-

n/a

Version	Status	Constraints
2.0	affected	-

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

Link	Providers	Tags
https://consumer.huawei.com/en/support/bulletin/2022/10/		Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697		Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-41531		Advisory