CVE-2022-44549
The LBS module has a vulnerability in geofencing API access. Successful exploitation of this vulnerability may cause third-party apps to access the geofencing APIs without authorization, affecting user confidentiality.
- Score
- CVSS 3.1 7.5 High
- Status
- Modified - psirt@huawei.com
- Published
- 2022-11-09
- Last modified
- 2025-05-01
- Weaknesses
- CWE-862
Affected products
References
- https://consumer.huawei.com/en/support/bulletin/2022/11/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433