CVE-2022-48312 - The HwPCAssistant module has the out-of-bounds read/write vulnerability

Back Back to CVE browser

CRITICAL

The HwPCAssistant module has the out-of-bounds read/write vulnerability

Published Apr 16, 2023

9.1

CRITICAL

CVSS 3.1

EPSS 0.40%

Description

The HwPCAssistant module has the out-of-bounds read/write vulnerability. Successful exploitation of this vulnerability may affect confidentiality and integrity.

Affected products

Vendor Huawei Product EMUI Default
unaffected
- Version
  12.0.0
  Status
  affected
  Constraints
  -
Vendor Huawei Product HarmonyOS Default
unaffected
- Version
  2.0.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Huawei

EMUI

unaffected

Version	Status	Constraints
12.0.0	affected	-

Huawei

HarmonyOS

unaffected

Version	Status	Constraints
2.0.0	affected	-

Remediation

No remediation recorded yet.

Metrics

0.40% 0.00398

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 4, 2026.

EPSS probability 0.00398

Score over time

2023-2026

EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v3
EPSS v4
EPSS v5

Table of values (8 key points)

Flat stretches are collapsed. Showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 4, 2026	0.40% (0.00398)	31.67th	v5 (v2026.06.15)
Jun 15, 2026	0.40% (0.00398)	31.34th	v5 (v2026.06.15)
Mar 17, 2025	0.08% (0.00082)	21.58th	v4 (v2025.03.14)
Dec 12, 2024	0.13% (0.00125)	48.70th	v3 (v2023.03.01)
May 18, 2024	0.11% (0.00113)	44.50th	v3 (v2023.03.01)
Apr 22, 2024	0.10% (0.00104)	42.05th	v3 (v2023.03.01)
Apr 27, 2023	0.09% (0.00091)	37.66th	v3 (v2023.03.01)
Apr 16, 2023	0.04% (0.00043)	7.00th	v3 (v2023.03.01)

Weaknesses (2)

CWE-125

Out-of-bounds Read

CWE-787

Out-of-bounds Write

References (2)

https://consumer.huawei.com/en/support/bulletin/2023/4/
Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202304-0000001506528486
Vendor Advisory

Link	Providers	Tags
https://consumer.huawei.com/en/support/bulletin/2023/4/		Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202304-0000001506528486		Vendor Advisory