CVE-2023-39386 Vulnerability Details

  /     /     /  

CVE-2023-39386 Metadata Quick Info

CVE Published: 13/08/2023 | CVE Updated: 10/10/2024 | CVE Year: 2023
Source: huawei | Vendor: Huawei | Product: HarmonyOS
Status : PUBLISHED

---

CVE-2023-39386 Description

Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause newly installed apps to fail to restart.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-120
CWE Name: CWE-120 Buffer Copy without Checking Size of Input ( Classic Buffer Overflow )
Source: Huawei

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).