CVE-2022-32962: Hinet Hicos Natural Person Credential Component Client

Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days.

HiCOS’ client-side citizen certificate component has a double free vulnerability. An unauthenticated physical attacker can exploit this vulnerability to corrupt memory and execute arbitrary code, manipulate system data or terminate service.

Affected products

• Hinet Hicos Natural Person Credential Component Client: version 3.0.3.30306 only; version 3.0.3.30404 only; version 3.1.0.00002 only

Published 2022-07-20. Last modified 2026-06-17.