CVE-2023-46772

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Vulnerability of parameters being out of the value range in the QMI service module. Successful exploitation of this vulnerability may cause errors in reading file data.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
Huawei	EMUI	11.0.1
huawei	emui	11.0.1

References

https://consumer.huawei.com/en/support/bulletin/2023/11/Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202311-0000001729189597Not Applicable
https://consumer.huawei.com/en/support/bulletin/2023/11/Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202311-0000001729189597Not Applicable

Timeline

Published: Nov 8, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-467739.8Permission management vulnerability in the PMS module. Successful exploitation of this vulnerability may cause privilege escalation.CVE-2023-467747.5Vulnerability of uncaught exceptions in the NFC module. Successful exploitation of this vulnerability can affect NFC availability.CVE-2023-467758.8Cross-Site Request Forgery (CSRF) vulnerability in Djo Original texts Yandex WebMaster plugin <= 1.18 versions.CVE-2023-467768.8Cross-Site Request Forgery (CSRF) vulnerability in Serena Villa Auto Excerpt everywhere plugin <= 1.5 versions.CVE-2023-467778.8Cross-Site Request Forgery (CSRF) vulnerability in Custom Login Page | Temporary Users | Rebrand Login | Login Captcha plugin <= 1.1.3 versi CVE-2023-467788.8Cross-Site Request Forgery (CSRF) vulnerability in TheFreeWindows Auto Limit Posts Reloaded plugin <= 2.5 versions.CVE-2023-467798.8Cross-Site Request Forgery (CSRF) vulnerability in EasyRecipe plugin <= 3.5.3251 versions.CVE-2023-46785.5Divide By Zero in GitHub repository gpac/gpac prior to 2.3-DEV.CVE-2023-467808.8Cross-Site Request Forgery (CSRF) vulnerability in Alter plugin <= 1.0 versions.CVE-2023-467818.8Cross-Site Request Forgery (CSRF) vulnerability in Roland Murg Current Menu Item for Custom Post Types plugin <= 1.5 versions.CVE-2023-467825.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Chris Yee MomentoPress for Momento360 plugin <= 1.0.1 versions.CVE-2023-467835.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Bright Plugins Pre-Orders for WooCommerce plugin <= 1.2.13 versions.