CVE-2024-54104: High severity harmonyos vulnerability
Published Dec 12, 2024
·Updated
Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Affected Software
1 affected component
Huawei Harmonyos=5.0.0
Event History
Dec 12, 2024
CVE Published
via MITRE·11:58 AM
Data Sourced
via MITRE·11:58 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-54104?
CVE-2024-54104 has a high severity level due to its impact on service confidentiality.
2
How do I fix CVE-2024-54104?
To fix CVE-2024-54104, users should update their Huawei HarmonyOS to the latest supported version.
3
What components are affected by CVE-2024-54104?
CVE-2024-54104 specifically affects the UIExtension module in Huawei HarmonyOS version 5.0.0.
4
What potential impacts does CVE-2024-54104 have on user data?
Successful exploitation of CVE-2024-54104 may lead to unauthorized access to sensitive user data due to compromised service confidentiality.
5
Is there a workaround for CVE-2024-54104?
Currently, there is no official workaround for CVE-2024-54104, and users are advised to apply the recommended updates.