First published: Sun Aug 13 2023(Updated: )
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.
Credit: psirt@huawei.com psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei Emui | =11.0.1 | |
Huawei Emui | =12.0.0 | |
Huawei Emui | =12.0.1 | |
Huawei Emui | =13.0.0 | |
Huawei Harmonyos | =2.0.0 | |
Huawei Harmonyos | =2.0.1 | |
Huawei Harmonyos | =2.1.0 | |
Huawei Harmonyos | =3.0.0 | |
Huawei Harmonyos | =3.1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-39403 is a parameter verification vulnerability in the installd module that allows unauthorized reading and writing of sandbox files.
CVE-2023-39403 has a severity rating of 9.1 (Critical).
CVE-2023-39403 affects Huawei Emui versions 11.0.1, 12.0.0, 12.0.1, 13.0.0, and Huawei Harmonyos versions 2.0.0, 2.0.1, 2.1.0, 3.0.0, 3.1.0.
To fix CVE-2023-39403, it is recommended to install the provided security updates from the official Huawei website.
You can find more information about CVE-2023-39403 on the official Huawei support bulletin and HarmonyOS documentation.