CVE-2023-51426

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-843

Affected software

VendorProductVersions
HonorMagic OS>= 7.0, < 7.0.0.129

References

Timeline

Published
Dec 29, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-514277.1Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.CVE-2023-514287.1Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.CVE-2023-514295.5Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.CVE-2023-51439.8** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 up to 20151231. This isCVE-2023-514305.5Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.CVE-2023-514315.5Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptiCVE-2023-514325.5Some Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak.CVE-2023-514335.5Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.CVE-2023-514347.8Some Honor products are affected by buffer overflow vulnerability, successful exploitation could cause code execution.CVE-2023-514357.1Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.CVE-2023-514365.9Cross-site scripting vulnerability exists in UNIVERSAL PASSPORT RX versions 1.0.0 to 1.0.8, which may allow a remote authenticated attacker CVE-2023-514377.4Observable timing discrepancy vulnerability in Apache Pulsar SASL Authentication Provider can allow an attacker to forge a SASL Role Token t