CVE-2023-41306 — Race Condition in Huawei Emui

CWE-362 — Race Condition3 documents3 sources
Severity
3.7LOWNVD
EPSS
0.1%
top 76.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Huawei EmuiHuawei Harmonyos
Timeline
PublishedSep 27

Description

Vulnerability of mutex management in the bone voice ID trusted application (TA) module. Successful exploitation of this vulnerability may cause the bone voice ID feature to be unavailable.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 2.2 | Impact: 1.4

Affected Packages4 packages

▶CVEListV5huawei/emui12.0.0, 12.0.1+1
▶NVDhuawei/emui12.0, 12.0.1+1
▶CVEListV5huawei/harmonyos2.0.0, 2.0.1+1
▶NVDhuawei/harmonyos2.0.0, 2.0.1+1

🔴Vulnerability Details

2
GHSA
GHSA-h8rm-x4mw-h3wp: Vulnerability of mutex management in the bone voice ID trusted application (TA) module↗2023-09-27
▶
CVEList
CVE-2023-41306: Vulnerability of mutex management in the bone voice ID trusted application (TA) module↗2023-09-26
▶