CVE-2023-39398: Critical severity emui 5.0 vulnerability

Published Aug 13, 2023

Updated

Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.

Affected Software

9 affected components

Huawei Emui=11.0.1

Huawei Emui=12.0.0

Huawei Emui=12.0.1

Huawei Emui=13.0.0

Huawei Harmonyos=2.0.0

Huawei Harmonyos=2.0.1

Huawei Harmonyos=2.1.0

Huawei Harmonyos=3.0.0

Huawei Harmonyos=3.1.0

Event History

Aug 13, 2023

CVE Published

via MITRE·12:34 PM

Data Sourced

via MITRE·12:34 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2023-39398?

CVE-2023-39398 is a parameter verification vulnerability in the installd module that allows unauthorized access to read and write sandbox files.

What is the severity of CVE-2023-39398?

CVE-2023-39398 has a severity rating of 9.1, which is classified as critical.

Which software versions are affected by CVE-2023-39398?

CVE-2023-39398 affects Huawei Emui versions 11.0.1, 12.0.0, 12.0.1, 13.0.0, Huawei Harmonyos versions 2.0.0, 2.0.1, 2.1.0, 3.0.0, and 3.1.0.

How can CVE-2023-39398 be exploited?

CVE-2023-39398 can be exploited by sending malicious parameters to the installd module, allowing unauthorized access to sandbox files.

Is there a fix for CVE-2023-39398?

Yes, Huawei has released security updates to fix CVE-2023-39398. It is recommended to update to the latest version of Huawei Emui or Huawei Harmonyos to mitigate the vulnerability.