CVE-2023-41297: Critical severity emui 5.0 vulnerability

Published Sep 25, 2023

Updated

Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking.

Affected Software

2 affected components

Huawei Emui=12.0.0

Huawei Harmonyos=2.0.0

Event History

Sep 25, 2023

CVE Published

via MITRE·11:39 AM

Data Sourced

via MITRE·11:39 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2023-41297?

The severity of CVE-2023-41297 is critical, with a severity value of 9.8.

Which software versions are affected by CVE-2023-41297?

CVE-2023-41297 affects Huawei Emui version 12.0.0 and Huawei Harmonyos version 2.0.0.

What is the vulnerability description of CVE-2023-41297?

CVE-2023-41297 is a vulnerability that arises from defects introduced in the design process in the HiviewTunner module. Exploiting this vulnerability can lead to service hijacking.

How can I mitigate CVE-2023-41297?

To mitigate CVE-2023-41297, it is recommended to apply the security updates provided by Huawei. Refer to the provided reference links for more information.

Where can I find more information about CVE-2023-41297?

For more information about CVE-2023-41297, you can refer to the following references: [Reference 1](https://consumer.huawei.com/en/support/bulletin/2023/9/) and [Reference 2](https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158).