CVE-2023-41306: Race Condition
First published: Tue Sep 26 2023(Updated: )
Vulnerability of mutex management in the bone voice ID trusted application (TA) module. Successful exploitation of this vulnerability may cause the bone voice ID feature to be unavailable.
Credit: psirt@huawei.com psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei Emui | =12.0 | |
| Huawei Emui | =12.0.1 | |
| Huawei Harmonyos | =2.0.0 | |
| Huawei Harmonyos | =2.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2023-41306.
What is the severity level of CVE-2023-41306?
The severity level of CVE-2023-41306 is low with a value of 3.7.
What is the affected software by CVE-2023-41306?
The affected software by CVE-2023-41306 includes Huawei Emui 12.0, Huawei Emui 12.0.1, Huawei Harmonyos 2.0.0, and Huawei Harmonyos 2.0.1.
How can CVE-2023-41306 be exploited?
CVE-2023-41306 can be exploited by manipulating the mutex management in the bone voice ID trusted application (TA) module.
What is the fix for CVE-2023-41306?
To fix CVE-2023-41306, it is recommended to apply the security updates provided by Huawei, which are available in their support bulletin and security bulletins.
- collector/nvd-api
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/weakness
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/huawei
- canonical/huawei emui
- version/huawei emui/12.0
- version/huawei emui/12.0.1
- canonical/huawei harmonyos
- version/huawei harmonyos/2.0.0
- version/huawei harmonyos/2.0.1