First published: Tue Sep 26 2023(Updated: )
Keep-alive vulnerability in the sticky broadcast mechanism. Successful exploitation of this vulnerability may cause malicious apps to run continuously in the background.
Credit: psirt@huawei.com psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei Emui | =11.0.1 | |
Huawei Emui | =12.0 | |
Huawei Emui | =12.0.1 | |
Huawei Emui | =13.0.0 | |
Huawei Harmonyos | =2.0.0 | |
Huawei Harmonyos | =2.0.1 | |
Huawei Harmonyos | =2.1.0 | |
Huawei Harmonyos | =3.0.0 | |
Huawei Harmonyos | =3.1.0 | |
Huawei Harmonyos | =4.0.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-41310 is a keep-alive vulnerability in the sticky broadcast mechanism that allows malicious apps to run continuously in the background.
CVE-2023-41310 affects Huawei Emui versions 11.0.1, 12.0, 12.0.1, 13.0.0, and Huawei Harmonyos versions 2.0.0, 2.0.1, 2.1.0, 3.0.0, and 3.1.0.
CVE-2023-41310 has a severity rating of 3.3 (low).
To fix CVE-2023-41310, it is recommended to update your Huawei Emui or Huawei Harmonyos software to the latest version provided by Huawei.
You can find more information about CVE-2023-41310 on the official Huawei support bulletin and the Huawei Harmonyos security bulletins.