CVE-2022-38977: Huawei Harmonyos

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

The HwAirlink module has a heap overflow vulnerability.Successful exploitation of this vulnerability may cause out-of-bounds writes, resulting in modification of sensitive data.

Affected products

• Huawei Harmonyos: version 2.0 only; version 2.1 only

Published 2022-10-14. Last modified 2026-06-17.