CVE-2023-52366

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52366
Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormally.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://consumer.huawei.com/en/support/bulletin/2024/2/ Vendor Advisory
https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405 Vendor Advisory
https://consumer.huawei.com/en/support/bulletin/2024/2/ Vendor Advisory
https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:huawei:emui:12.0.0:*:*:*:*:*:*:*
cpe:2.3:o:huawei:emui:13.0.0:*:*:*:*:*:*:*
cpe:2.3:o:huawei:harmonyos:2.0.0:*:*:*:*:*:*:*
cpe:2.3:o:huawei:harmonyos:3.0.0:*:*:*:*:*:*:*
cpe:2.3:o:huawei:harmonyos:3.1.0:*:*:*:*:*:*:*
cpe:2.3:o:huawei:harmonyos:4.0.0:*:*:*:*:*:*:*
History

13 Mar 2025, 14:48

Type Values Removed Values Added
References () https://consumer.huawei.com/en/support/bulletin/2024/2/ - () https://consumer.huawei.com/en/support/bulletin/2024/2/ - Vendor Advisory
References () https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405 - () https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405 - Vendor Advisory
First Time Huawei emui
Huawei
Huawei harmonyos
CPE cpe:2.3:o:huawei:harmonyos:3.1.0:*:*:*:*:*:*:*
cpe:2.3:o:huawei:harmonyos:4.0.0:*:*:*:*:*:*:*
cpe:2.3:o:huawei:emui:13.0.0:*:*:*:*:*:*:*
cpe:2.3:o:huawei:harmonyos:2.0.0:*:*:*:*:*:*:*
cpe:2.3:o:huawei:emui:12.0.0:*:*:*:*:*:*:*
cpe:2.3:o:huawei:harmonyos:3.0.0:*:*:*:*:*:*:*

21 Nov 2024, 08:39

Type Values Removed Values Added
References () https://consumer.huawei.com/en/support/bulletin/2024/2/ - () https://consumer.huawei.com/en/support/bulletin/2024/2/ -
References () https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405 - () https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405 -

22 Aug 2024, 18:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5

20 Feb 2024, 19:50

Type Values Removed Values Added
Summary
  • (es) Vulnerabilidad de lectura fuera de los límites en el módulo de reconocimiento de actividad inteligente. La explotación exitosa de esta vulnerabilidad puede provocar que las funciones funcionen de manera anormal.

18 Feb 2024, 04:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-18 04:15

Updated : 2025-03-13 14:48

NVD link : CVE-2023-52366

Mitre link : CVE-2023-52366

CVE.ORG link : CVE-2023-52366

JSON object : View

Products Affected

huawei

  • emui
  • harmonyos
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')