Read the docs
TI-2023-06342 Aliases CVE-2023-6939GHSA-6348-qpvc-cw5w

Some Honor products are affected by type confusion vulnerability, successful exploitation could cause denial of service.

Priority LOW 24CWE-843Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-843 and the CVSS impact.

Summary

Some Honor products are affected by type confusion vulnerability, successful exploitation could cause denial of service.

Why it matters now

EPSS 0.00162 5th percentileScored 2026-11-07
Fix Fixed Magic UI (Honor): 6.0.0.217

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
HonorMagic UI6.0 to before 6.0.0.2176.0.0.217Patch availableCNA
  • Magic UI VendorHonor Affected 6.0 to before 6.0.0.217 Fixed in 6.0.0.217 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:o:hihonor:magic_ui:*:*:*:*:*:*:*:*before 6.1.0.212VulnerableHihonor
  • cpe:2.3:o:hihonor:magic_ui:*:*:*:*:*:*:*:* Versions before 6.1.0.212 Vulnerable ·Hihonor

Remediation

  • Fix · CNA Magic UI (Honor) Fixed in 6.0.0.217

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-6939
  2. 2026-10-03 Alias added: GHSA-6348-qpvc-cw5w

References

Advisory 1

  • TI-2025-28915 Several services in Honor Device Co., Ltd Honor PC Manager v16.0.0.118 was discovered to… CVSS 3.1HIGH 8.8
  • TI-2023-09267 Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution CVSS 3.1CRITICAL 9.8
  • TI-2025-01918 Whitelist bypass Vulnerability in GameCenter CVSS 3.1CRITICAL 9.1
  • TI-2025-01319 Code Injection Vulnerability in Phoneservice CVSS 3.1CRITICAL 9.1
  • TI-2023-28088 Some Honor products are affected by buffer overflow vulnerability, successful exploitation could cause code execution. CVSS 3.1CRITICAL 9.3
  • TI-2023-28089 Improper privilege management in Honor Magic UI CVSS 3.1HIGH 7.1
See all 52 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences