CVE-2023-41297

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
HuaweiHarmonyOS2.0.0
HuaweiEMUI12.0.0

References

Timeline

Published
Sep 25, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-412987.5Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect confidentiality.CVE-2023-412997.5DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.CVE-2023-41305.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea() CVE-2023-413007.5Vulnerability of parameters not being strictly verified in the PMS module. Successful exploitation of this vulnerability may cause the systeCVE-2023-413017.5Vulnerability of unauthorized API access in the PMS module. Successful exploitation of this vulnerability may cause features to perform abnoCVE-2023-413027.5Redirection permission verification vulnerability in the home screen module. Successful exploitation of this vulnerability may cause featureCVE-2023-413037.5Command injection vulnerability in the distributed file system module. Successful exploitation of this vulnerability may cause variables in CVE-2023-413045.3Parameter verification vulnerability in the window module.Successful exploitation of this vulnerability may cause the size of an app window CVE-2023-413057.5Vulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS message module. Successful exploitation of tCVE-2023-413063.7Vulnerability of mutex management in the bone voice ID trusted application (TA) module. Successful exploitation of this vulnerability may caCVE-2023-413077.5Memory overwriting vulnerability in the security module. Successful exploitation of this vulnerability may affect availability.CVE-2023-413087.5Screenshot vulnerability in the input module. Successful exploitation of this vulnerability may affect confidentiality.
CVE-2023-41297: Critical severity, CVSS 9.8 | Vulnix