CVE-2023-3456: Input Validation
Published Jul 6, 2023
·Updated
Vulnerability of kernel raw address leakage in the hang detector module. Successful exploitation of this vulnerability may affect service confidentiality.
Affected Software
7 affected components
Huawei Emui=12.0.0
Huawei Emui=13.0.0
Huawei Harmonyos=2.0
Huawei Harmonyos=2.0.1
Huawei Harmonyos=2.1
Huawei Harmonyos=3.0.0
Huawei Harmonyos=3.1.0
Event History
Jul 6, 2023
CVE Published
via MITRE·12:34 PM
Data Sourced
via MITRE·12:34 PM
DescriptionWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-3456?
CVE-2023-3456 is classified as affecting service confidentiality due to kernel raw address leakage.
2
How do I fix CVE-2023-3456?
To fix CVE-2023-3456, users should update their Huawei Emui or HarmonyOS to the latest available version.
3
Which versions are affected by CVE-2023-3456?
CVE-2023-3456 affects Huawei Emui versions 12.0.0 and 13.0.0, as well as HarmonyOS versions 2.0, 2.0.1, 2.1, 3.0.0, and 3.1.0.
4
Can exploitation of CVE-2023-3456 lead to data loss?
Exploitation of CVE-2023-3456 may compromise service confidentiality but does not directly result in data loss.
5
Is CVE-2023-3456 a remote or local vulnerability?
CVE-2023-3456 is considered a local vulnerability as it requires exploitation on the affected device.