CVE-2023-46759: High severity harmonyos vulnerability

Published Nov 8, 2023

Updated

Permission control vulnerability in the call module. Successful exploitation of this vulnerability may affect service confidentiality.

Affected Software

10 affected components

Huawei Harmonyos=2.0.0

Huawei Harmonyos=2.0.1

Huawei Harmonyos=2.1.0

Huawei Harmonyos=3.0.0

Huawei Harmonyos=3.1.0

Huawei Harmonyos=4.0.0

Huawei Emui=11.0.1

Huawei Emui=12.0.0

Huawei Emui=12.0.1

Huawei Emui=13.0.0

Event History

Nov 8, 2023

CVE Published

via MITRE·10:20 AM

Data Sourced

via MITRE·10:20 AM

DescriptionWeakness

Data Sourced

via NVD·11:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-46759?

The severity of CVE-2023-46759 is high with a severity value of 7.5.

Which software versions are affected by CVE-2023-46759?

CVE-2023-46759 affects Huawei HarmonyOS versions 2.0.0, 2.0.1, 2.1.0, 3.0.0, 3.1.0, and 4.0.0, as well as Huawei EMUI versions 11.0.1, 12.0.0, 12.0.1, and 13.0.0.

How do I fix CVE-2023-46759?

To fix CVE-2023-46759, it is recommended to apply the security updates provided by Huawei. Please refer to the following references for more information: - [Huawei Support Bulletin](https://consumer.huawei.com/en/support/bulletin/2023/11/) - [HarmonyOS Security Bulletins](https://device.harmonyos.com/en/docs/security/update/security-bulletins-202311-0000001729189597)

What is the description of CVE-2023-46759?

CVE-2023-46759 is a permission control vulnerability in the call module that can potentially affect the confidentiality of services.