CVE-2024-45445 — Incomplete Cleanup in Huawei Emui

CWE-459 — Incomplete Cleanup3 documents3 sources
Severity
5.5MEDIUMNVD
CNA4.0
EPSS
0.0%
top 89.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Huawei EmuiHuawei Harmonyos
Timeline
PublishedSep 4

Description

Vulnerability of resources not being closed or released in the keystore module Impact: Successful exploitation of this vulnerability will affect availability.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

▶CVEListV5huawei/emui13.0.0, 14.0.0+1
▶NVDhuawei/emui13.0.0, 14.0.0+1
▶CVEListV5huawei/harmonyos4 versions+3
▶NVDhuawei/harmonyos4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-7c3r-4j4x-4rjj: Vulnerability of resources not being closed or released in the keystore module Impact: Successful exploitation of this vulnerability will affect avail↗2024-09-04
▶
CVEList
CVE-2024-45445: Vulnerability of resources not being closed or released in the keystore module Impact: Successful exploitation of this vulnerability will affect avail↗2024-09-04
▶
CVE-2024-45445 — Incomplete Cleanup in Huawei Emui | cvebase