CVE-2022-41578 - The MPTCP module has an out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause root privilege escalation attacks implemented by modifying program information

Back Back to CVE browser

CRITICAL

The MPTCP module has an out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause root privilege escalation attacks implemented by modifying program information

Published Oct 14, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 0.56%

Description

The MPTCP module has an out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause root privilege escalation attacks implemented by modifying program information.

Affected products

Vendor Huawei Product EMUI Default
unknown
Affected
- 11.0.1
- 12.0.0
Vendor Huawei Product HarmonyOS Default
unknown
Affected
- 2.0
- 2.1

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Huawei	EMUI	unknown	Affected 11.0.1 12.0.0
Huawei	HarmonyOS	unknown	Affected 2.0 2.1

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (3)

https://consumer.huawei.com/en/support/bulletin/2022/10/
Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697
Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-44770
Advisory

Link	Providers	Tags
https://consumer.huawei.com/en/support/bulletin/2022/10/		Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697		Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-44770		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner huawei

Published Oct 14, 2022

Updated May 14, 2025

Reserved Sep 27, 2022

Link CVE-2022-41578

CISA Vulnrichment

Updated May 14, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-41578

Red Hat

No data

ENISA EUVD

Assigner huawei

Published Oct 14, 2022

Updated May 14, 2025

Link EUVD-2022-44770

GitHub

No data