CVE-2023-39386

Summary

Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause newly installed apps to fail to restart.

Affected Software

Weaknesses

• CWE-120: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

ADP Enrichment

CVE Program Container

Additional References

• https://consumer.huawei.com/en/support/bulletin/2023/8/
• https://device.harmonyos.com/en/docs/security/update/security-bulletins-202308-0000001667644725

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://consumer.huawei.com/en/support/bulletin/2023/8/
• https://device.harmonyos.com/en/docs/security/update/security-bulletins-202308-0000001667644725

• ←Previous
• Next→