First published: Tue Mar 04 2025(Updated: )
Permission verification bypass vulnerability in the notification module Impact: Successful exploitation of this vulnerability may affect availability.
Credit: psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
EMUI 5.0 | =12.0.0 | |
EMUI 5.0 | =13.0.0 | |
EMUI 5.0 | =14.0.0 | |
HarmonyOS | =2.0.0 | |
HarmonyOS | =2.1.0 | |
HarmonyOS | =3.0.0 | |
HarmonyOS | =3.1.0 | |
HarmonyOS | =4.0.0 | |
HarmonyOS | =4.2.0 | |
HarmonyOS | =4.3.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-58044 has been classified as a medium severity vulnerability due to its potential impact on availability.
To fix CVE-2024-58044, users should update their Huawei devices to the latest versions of EMUI or HarmonyOS as provided by Huawei.
CVE-2024-58044 affects Huawei EMUI versions 12.0.0, 13.0.0, 14.0.0 and HarmonyOS versions 2.0.0 through 4.3.0.
Yes, CVE-2024-58044 can be exploited remotely, allowing unauthorized access to the notification module.
There is no official workaround for CVE-2024-58044; the recommended action is to apply the software updates.