CVE-2023-39398

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-275CWE-285

Affected software

No affected versions have been published.

Timeline

Published
Aug 13, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-393999.1Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be reaCVE-2023-39407.5Relative Path Traversal vulnerability in ZkTeco-based OEM devices allows an attacker to access any file on the system. This issue affectsCVE-2023-394009.1Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be reaCVE-2023-394019.1Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be reaCVE-2023-394029.1Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be reaCVE-2023-394039.1Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be reaCVE-2023-394047.5Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerabilityCVE-2023-394059.8Vulnerability of out-of-bounds parameter read/write in the Wi-Fi module. Successful exploitation of this vulnerability may cause other apps CVE-2023-394067.5Permission control vulnerability in the XLayout component. Successful exploitation of this vulnerability may cause apps to forcibly restart.CVE-2023-394079.1The Watchkit has a risk of unauthorized file access.Successful exploitation of this vulnerability may affect confidentiality and integrity.CVE-2023-394087.5DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.CVE-2023-394097.5DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.
CVE-2023-39398: Critical severity, CVSS 9.1 | Vulnix