CVE-2023-52537: High severity emui 5.0 vulnerability

Published Apr 8, 2024

Updated

Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this vulnerability will affect availability.

Affected Software

7 affected components

Huawei Emui=12.0.0

Huawei Emui=13.0.0

Huawei Harmonyos=2.0.0

Huawei Harmonyos=2.1.0

Huawei Harmonyos=3.0.0

Huawei Harmonyos=3.1.0

Huawei Harmonyos=4.0.0

Event History

Apr 8, 2024

CVE Published

via MITRE·08:40 AM

Data Sourced

via MITRE·08:40 AM

DescriptionWeakness

Data Sourced

via NVD·09:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2023-52537?

CVE-2023-52537 has a severity score that indicates it can significantly impact system availability if exploited.

How do I fix CVE-2023-52537?

To fix CVE-2023-52537, update affected Huawei EMUI or HarmonyOS devices to the latest security patches provided by the manufacturer.

What devices are affected by CVE-2023-52537?

CVE-2023-52537 affects Huawei devices running specific versions of EMUI 12.0.0, EMUI 13.0.0, and HarmonyOS versions from 2.0.0 to 4.0.0.

What type of vulnerability is CVE-2023-52537?

CVE-2023-52537 is a vulnerability that allows for the bypass of package name verification within the HwIms module.

What could happen if CVE-2023-52537 is exploited?

If CVE-2023-52537 is exploited, it could lead to denial of service and affect the availability of the affected device.