NVD disclosure day

Published threat advisories for August 13, 2023

CVE advisoryCRITICAL

CVE-2023-39403

Huawei EMUI and HarmonyOS installd Unauthorized File Read Write Vulnerability

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A parameter verification vulnerability in the installd module of Huawei EMUI and HarmonyOS could allow unauthorized reading and writing of sandbox files. This could lead to data compromise or system integrity issues if exploited.

CVE advisoryCRITICAL

CVE-2023-39402

Huawei EMUI HarmonyOS Installd Module Unauthorized File Access Vulnerability

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A vulnerability in the installd module of Huawei EMUI and HarmonyOS allows unauthorized reading and writing of sandbox files due to parameter verification flaws. This could lead to unauthorized access and modification of sensitive application or system data within restricted areas. Confirming the presence and exposure

CVE advisoryCRITICAL

CVE-2023-39401

Huawei EMUI and HarmonyOS Installd Module Parameter Verification Vulnerability.

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A parameter verification vulnerability exists in the installd module of Huawei EMUI and HarmonyOS. If reachable, this flaw may permit unauthorized reading and writing of sandbox files. This could impact data confidentiality and integrity. The relevance and exposure to your specific environment should be confirmed.

CVE advisoryCRITICAL

CVE-2023-39400

Huawei EMUI and HarmonyOS installd Module Unauthorized File Access Vulnerability

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A parameter verification flaw in the installd module could allow unauthorized reading and writing of sandbox files, potentially impacting system integrity and sensitive data. This vulnerability is reachable over the network.

CVE advisoryCRITICAL

CVE-2023-39399

Huawei EMUI HarmonyOS installd Module Unauthorized Read Write Vulnerability

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A parameter verification vulnerability in Huawei's EMUI and HarmonyOS installd module allows for unauthorized reading and writing of sandbox files. This could impact system integrity if exploited. Confirming the use of affected Huawei systems is crucial.

CVE advisoryCRITICAL

CVE-2023-39398

Huawei EMUI and HarmonyOS installd Module Unauthorized File Read Write Vulnerability

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A parameter verification vulnerability exists in the installd module of Huawei EMUI and HarmonyOS. If reachable, this could allow unauthorized reading and writing of sandbox files, potentially affecting data integrity within application sandboxes. The relevance and exposure of this vulnerability are currently uncertain

CVE advisoryCRITICAL

CVE-2023-39385

Huawei EMUI and HarmonyOS Media Module Configuration Flaw Allows Unauthorized Access.

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

Configuration flaws in the media module of Huawei operating systems may allow unauthorized access. This vulnerability is reachable via the network without special privileges or user interaction. Confirming device impact is essential for organizations using affected Huawei products.

CVE advisoryCRITICAL

CVE-2023-39405

Huawei EMUI HarmonyOS Wi-Fi Module Out-of-Bounds Read Write Vulnerability

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A vulnerability in the Wi-Fi module of Huawei's EMUI and HarmonyOS allows for out-of-bounds parameter reads or writes. If reachable, this could enable other applications to execute with escalated privileges. It is uncertain if this technology is present in your environment.