CVE-2023-39398
CVSS 3.1 Score 9.1 of 10 (high)
Details
Published Aug 13, 2023
Updated: Aug 17, 2023
CWE ID 275
Summary
CVE-2023-39398 is a parameter verification vulnerability affecting the installd module. An attacker can exploit this vulnerability by passing unverified user input, potentially allowing for unauthorized read and write access to sandbox files. This issue poses a significant risk, as it may lead to sensitive data exposure or system modification. Users are highly encouraged to apply the necessary patches or updates as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- HarmonyOS
- Huawei EMUI
Affected Vendors
- Huawei Technologies