by Kastro
Paper/Archive/CVE-2023-52370

CVE-2023-52370

Huawei HarmonyOS — Stack overflow vulnerability in the network acceleration module.Successful exploitation of this vulnerability may cause unauthorized file…

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
37
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 39.6.396 × 207.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Stack overflow vulnerability in the network acceleration module.Successful exploitation of this vulnerability may cause unauthorized file access.

Affected

ProductAffectedFixed inSource
HarmonyOS4.0.0–CNA
HarmonyOS3.1.0–CNA
HarmonyOS3.0.0–CNA
HarmonyOS2.1.0–CNA
HarmonyOS2.0.0–CNA
EMUI13.0.0–CNA
EMUI12.0.0–CNA
harmonyos4.0.0–CISA-ADP
harmonyos3.1.0–CISA-ADP
harmonyos3.0.0–CISA-ADP
harmonyos2.1.0–CISA-ADP
harmonyos2.0.0–CISA-ADP

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refconsumer.huawei.com/en/support/bulletin/2024/2refdevice.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405