PatchTheCVE: hinethttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2022-35222: HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient paramhttps://patchthecve.com/cve/CVE-2022-35222.htmlhttps://patchthecve.com/cve/CVE-2022-35222.htmlWed, 17 Jun 2026 04:51:35 +0000MEDIUM 6.8: HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient parameter length validation. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system command or disrupt service.CVE-2022-32962: HiCOS’ client-side citizen certificate component has a double free vulnerabilityhttps://patchthecve.com/cve/CVE-2022-32962.htmlhttps://patchthecve.com/cve/CVE-2022-32962.htmlWed, 17 Jun 2026 04:48:18 +0000MEDIUM 6.8: HiCOS’ client-side citizen certificate component has a double free vulnerability. An unauthenticated physical attacker can exploit this vulnerability to corrupt memory and execute arbitrary code, manipulate system data or terminate service.CVE-2022-32961: HICOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when https://patchthecve.com/cve/CVE-2022-32961.htmlhttps://patchthecve.com/cve/CVE-2022-32961.htmlWed, 17 Jun 2026 04:48:18 +0000MEDIUM 6.8: HICOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for token information. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulaCVE-2022-32960: HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when https://patchthecve.com/cve/CVE-2022-32960.htmlhttps://patchthecve.com/cve/CVE-2022-32960.htmlWed, 17 Jun 2026 04:48:18 +0000MEDIUM 6.8: HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for card number. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate sysCVE-2022-32959: HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when https://patchthecve.com/cve/CVE-2022-32959.htmlhttps://patchthecve.com/cve/CVE-2022-32959.htmlWed, 17 Jun 2026 04:48:18 +0000MEDIUM 6.8: HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for OS information. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate