Paper/Archive/CVE-2023-52369

CVE-2023-52369

Huawei HarmonyOS — Stack overflow vulnerability in the NFC module.Successful exploitation of this vulnerability may affect service availability and integrity.

EPSS 0.4%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (ADP, NVD agree)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 36.1.361 × 207.2 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Stack overflow vulnerability in the NFC module.Successful exploitation of this vulnerability may affect service availability and integrity.

Affected

ProductAffectedFixed inSource

HarmonyOS4.0.0–CNA

HarmonyOS3.1.0–CNA

HarmonyOS3.0.0–CNA

HarmonyOS2.1.0–CNA

HarmonyOS2.0.0–CNA

EMUI13.0.0–CNA

EMUI12.0.0–CNA

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refconsumer.huawei.com/en/support/bulletin/2024/2 refdevice.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405