First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2023-52383

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Huawei	HarmonyOS	4.0.0; 3.1.0; 3.0.0
Huawei	EMUI	14.0.0; 13.0.0

References

https://consumer.huawei.com/en/support/bulletin/2024/5/Vendor Advisory
https://device.harmonyos.com/cn/docs/security/update/security-bulletins-phones-202405-0000001902628049Vendor Advisory
https://consumer.huawei.com/en/support/bulletin/2024/5/Vendor Advisory
https://device.harmonyos.com/cn/docs/security/update/security-bulletins-phones-202405-0000001902628049Vendor Advisory

Timeline

Published: May 14, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2023

CVE-2023-523845.5Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2023-523856.2Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect availability.CVE-2023-523867.5Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect availability.CVE-2023-523877.5Resource reuse vulnerability in the GPU module. Successful exploitation of this vulnerability may affect service confidentiality.CVE-2023-523887.5Permission control vulnerability in the clock module. Impact: Successful exploitation of this vulnerability will affect availability.CVE-2023-523899.8UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::conver CVE-2023-52397.5The Security & Malware scan by CleanTalk WordPress plugin before 2.121 retrieves client IP addresses from potentially untrusted headers, all CVE-2023-52407.5Improper access control in PAM propagation scripts in Devolutions Server 2023.2.8.0 and ealier allows an attack with permission to manage PA CVE-2023-52418.1The AI ChatBot for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.8.9 as well as 4.9.2 via the qcld_open CVE-2023-524247.4The IEEE 802.11 standard sometimes enables an adversary to trick a victim into connecting to an unintended or untrusted network with Home WE CVE-2023-524257.5libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large to CVE-2023-524265.5libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.