CVE-2023-26547: High severity emui 5.0 vulnerability
Published Mar 27, 2023
·Updated
The InputMethod module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation.
Affected Software
9 affected components
Huawei Emui=11.0.1
Huawei Emui=12.0.0
Huawei Emui=12.0.1
Huawei Emui=13.0.0
Huawei Harmonyos=2.0
Huawei Harmonyos=2.0.1
Huawei Harmonyos=2.1
Huawei Harmonyos=3.0.0
Huawei Harmonyos=3.1.0
Event History
Mar 27, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-26547?
CVE-2023-26547 is classified as a high severity vulnerability due to its potential to lead to privilege escalation.
2
How do I fix CVE-2023-26547?
To fix CVE-2023-26547, users should update to the latest patched version of Huawei EMUI or HarmonyOS software.
3
What versions are affected by CVE-2023-26547?
CVE-2023-26547 affects Huawei EMUI versions 11.0.1, 12.0.0, 12.0.1, and 13.0.0, as well as HarmonyOS versions 2.0, 2.0.1, 2.1, 3.0.0, and 3.1.0.
4
What type of vulnerability is CVE-2023-26547?
CVE-2023-26547 is a serialization/deserialization mismatch vulnerability.
5
Can CVE-2023-26547 be exploited remotely?
CVE-2023-26547 could potentially be exploited by an attacker with local access to the vulnerable device.