critical9.8
CVE-2023-44116
Vulnerability of access permissions not being strictly verified in the APPWidget module.Successful exploitation of this vulnerability may cause some apps to ru…
Impact
Vulnerability of access permissions not being strictly verified in the APPWidget module.Successful exploitation of this vulnerability may cause some apps to run without being authorized.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Harmonyos | Versions 2.0.0, 2.0.1, 2.1.0, 3.0.0, 3.1.0, 4.0.0 |
| Huawei | Emui | Versions 11.0.1, 12.0.0, 12.0.1, 13.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://consumer.huawei.com/en/support/bulletin/2023/10/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540
- https://consumer.huawei.com/en/support/bulletin/2023/10/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540