CVE-2023-31225 — Race Condition in Huawei Emui

CWE-362 — Race Condition3 documents3 sources
Severity
3.3LOWNVD
EPSS
0.0%
top 96.77%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Huawei EmuiHuawei Harmonyos
Timeline
PublishedMay 26

Description

The Gallery app has the risk of hijacking attacks. Successful exploitation of this vulnerability may cause download failures and affect product availability.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:LExploitability: 1.8 | Impact: 1.4

Affected Packages3 packages

▶CVEListV5huawei/emui4 versions+3
▶NVDhuawei/emui4 versions+3
▶CVEListV5huawei/harmonyos4 versions+3

🔴Vulnerability Details

2
CVEList
CVE-2023-31225: The Gallery app has the risk of hijacking attacks↗2023-05-26
▶
GHSA
GHSA-965f-g96x-3w5j: The Gallery app has the risk of hijacking attacks↗2023-05-26
▶
CVE-2023-31225 — Race Condition in Huawei Emui | cvebase