CVE-2023-34166 — Uncontrolled Resource Consumption in Huawei Emui

CWE-400 — Uncontrolled Resource ConsumptionCWE-770 — Allocation of Resources Without Limits or Throttling3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.2%
top 60.62%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Huawei EmuiHuawei Harmonyos
Timeline
PublishedJun 19

Description

Vulnerability of system restart triggered by abnormal callbacks passed to APIs.Successful exploitation of this vulnerability may cause the system to restart.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

▶CVEListV5huawei/emui4 versions+3
▶NVDhuawei/emui4 versions+3
▶CVEListV5huawei/harmonyos5 versions+4

🔴Vulnerability Details

2
GHSA
GHSA-rp64-mpmj-44xf: Vulnerability of system restart triggered by abnormal callbacks passed to APIs↗2023-06-19
▶
CVEList
CVE-2023-34166: Vulnerability of system restart triggered by abnormal callbacks passed to APIs↗2023-06-19
▶
CVE-2023-34166 — Uncontrolled Resource Consumption | cvebase