Double free vulnerability in the storage module. Successful exploitation of this vulnerability will cause the memory to be freed twice.
Weakness
The product calls free() twice on the same memory address.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Emui | Huawei | 11.0.0 (including) | 11.0.0 (including) |
| Harmonyos | Huawei | 2.0 (including) | 2.0 (including) |
| Magic_ui | Huawei | 4.0.0 (including) | 4.0.0 (including) |
Potential Mitigations
References
- https://consumer.huawei.com/en/support/bulletin/2022/9/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697
- https://consumer.huawei.com/en/support/bulletin/2022/9/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697