CVE-2023-34156

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Jun 19, 2023
Updated: Dec 17, 2024
CWE ID 384

Summary

CVE-2023-34156 refers to a vulnerability in HarmonyOS products' early fingerprint APIs. This issue allows for services to be denied upon successful exploitation. The vulnerability lies in the security checks implemented in these APIs, which can be bypassed, leading to service denial. Attackers can potentially exploit this flaw to disrupt services and cause operational disruptions. Users are advised to apply relevant patches as soon as they become available to mitigate the risk associated with this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Huawei EMUI

Affected Vendors

  • Huawei Technologies