CVE-2023-37240: Critical severity Huawei Emui vulnerability
Vulnerability of missing input length verification in the distributed file system. Successful exploitation of this vulnerability may cause out-of-bounds read.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-37240?
CVE-2023-37240 is rated as a significant vulnerability due to the potential for out-of-bounds read exploitation.
How do I fix CVE-2023-37240?
To address CVE-2023-37240, ensure that your Huawei devices running affected versions are updated to the latest security patches provided by Huawei.
Which devices are affected by CVE-2023-37240?
CVE-2023-37240 impacts several Huawei devices running Emui 12.0.1, Emui 13.0.0, and HarmonyOS versions 2.0.1, 3.0.0, and 3.1.0.
What type of attack does CVE-2023-37240 enable?
CVE-2023-37240 allows for potential out-of-bounds read attacks, which may lead to information disclosure.
Is CVE-2023-37240 being actively exploited in the wild?
As of now, there is no public indication that CVE-2023-37240 is being actively exploited, but it is recommended to apply security updates promptly.