CVE-2023-44106

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

API permission management vulnerability in the Fwk-Display module.Successful exploitation of this vulnerability may cause features to perform abnormally.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

No affected versions have been published.

Timeline

Published
Oct 11, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-441079.1Vulnerability of defects introduced in the design process in the screen projection module.Successful exploitation of this vulnerability may CVE-2023-441087.5Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart.CVE-2023-441097.5Clone vulnerability in the huks ta module.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2023-44119.8A vulnerability has been found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This vulnerability affects the funcCVE-2023-441104.3Out-of-bounds access vulnerability in the audio module.Successful exploitation of this vulnerability may affect availability.CVE-2023-441117.5Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service coCVE-2023-441127.5Out-of-bounds access vulnerability in the device authentication module. Successful exploitation of this vulnerability may affect confidentiaCVE-2023-441137.5Vulnerability of missing permission verification for APIs in the Designed for Reliability (DFR) module. Successful exploitation of this vulnCVE-2023-441147.5Out-of-bounds array vulnerability in the dataipa module.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2023-441157.5Vulnerability of improper permission control in the Booster module. Impact: Successful exploitation of this vulnerability may affect serviceCVE-2023-441169.8Vulnerability of access permissions not being strictly verified in the APPWidget module.Successful exploitation of this vulnerability may caCVE-2023-441177.5Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect ser
CVE-2023-44106: Critical severity, CVSS 9.8 | Vulnix