CVE-2022-38982

The fingerprint module has service logic errors.Successful exploitation of this vulnerability will cause the phone lock to be cracked

Critical · published October 14, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
49.4
In the wild
Unconfirmed
What it is

🔥 A service logic error in the fingerprint module could allow anyone to crack your phone’s lock with surprising ease! Think of it as a hotel where the front desk staff has forgotten to check ID — anyone could walk in and claim a room, no questions asked. It’s that simple! An attacker could gain full access to your device, reading personal messages, accessing sensitive information, and potentially wiping data. This vulnerability is alarmingly critical, as it completely undermines your device’s security!

Put simply

Think of it as a hotel where the front desk staff has forgotten to check ID — anyone could walk in and claim a room, no questions asked. It’s that simple! This vulnerability stems from flaws in the service logic of the fingerprint module, allowing unauthorized access through crafted inputs that bypass security checks.

What to do

An attacker could gain full access to your device, reading personal messages, accessing sensitive information, and potentially wiping data. This vulnerability is alarmingly critical, as it completely undermines your device’s security! Update your device's firmware immediately to the latest version to patch the vulnerability. Additionally, consider changing lock settings or using alternative methods of authentication until the patch is confirmed effective. You've got this! Follow these steps, and your device will be fortified against unauthorized access in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00627 · 49.4th percentile
Published
2022-10-14T00:00Z
EPSS history
Timeline
  • 14 OCT 00:00Z
    The fingerprint module has service logic errors.Successful exploitation of this vulnerability will cause the phone lock to be cracked
    cvelistv5