CVE-2023-52106

Summary

Vulnerability of permission verification for APIs in the DownloadProviderMain module. Impact: Successful exploitation of this vulnerability will affect integrity and availability.

Affected Software

Weaknesses

• CWE-264: CWE-264 Permissions, Privileges, and Access Controls

ADP Enrichment

CVE Program Container

Additional References

• https://consumer.huawei.com/en/support/bulletin/2024/1/
• https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-0000001799925977

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://consumer.huawei.com/en/support/bulletin/2024/9/
• https://consumer.huawei.com/en/support/bulletin/2024/1/
• https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-0000001799925977

• ←Previous
• Next→