Vulnerabilities

TI-2023-28089 CVE-2023-51435 · GHSA-pxf9-jjq8-hvw8

Improper privilege management in Honor Magic UI

LOW 36

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.00158 Published 2023-12-29 Fixed in 6.1.0.212 CWE-269

TI-2023-28088 CVE-2023-51434 · GHSA-gvx9-4gx5-gpvm

Some Honor products are affected by buffer overflow vulnerability, successful exploitation could cause code execution.

LOW 39

Some Honor products are affected by buffer overflow vulnerability, successful exploitation could cause code execution.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00196 Published 2023-12-29 Fixed in 6.1.0.212 CWE-120

TI-2023-28087 CVE-2023-51433 · GHSA-226q-4p65-9p8c

Improper privilege management in Honor Magic UI

LOW 24

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00131 Published 2023-12-29 Fixed in 6.1.0.212 CWE-269

TI-2023-28086 CVE-2023-51432 · GHSA-rf9c-wvjw-39jq

Out-of-bounds read in Honor Magic UI

LOW 24

Some Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00165 Published 2023-12-29 Fixed in 6.1.0.212 CWE-125

TI-2023-28085 CVE-2023-51431 · GHSA-gmx7-w94w-vc3m

Some Honor products are affected by incorrect privilege assignment vulnerability…

LOW 30

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00147 Published 2023-12-29 Fixed in 11.0.0.243

TI-2023-28084 CVE-2023-51430 · GHSA-c8r9-3pm5-m364

Improper privilege management in Honor Magic UI

LOW 24

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00152 Published 2023-12-29 Fixed in 6.1.0.212 CWE-269

TI-2023-28083 CVE-2023-51429 · GHSA-9jrv-g44v-qxwj

Improper privilege management in Honor Magic OS

LOW 26

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00152 Published 2023-12-29 Fixed in 7.0.0.156 CWE-269

TI-2023-28082 CVE-2023-51428 · GHSA-vrcj-gpp3-5v75

Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.

LOW 30

Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00161 Published 2023-12-29 Fixed in 7.0.0.129 CWE-843

TI-2023-28081 CVE-2023-51427 · GHSA-qgvh-24vw-pm43

Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.

LOW 30

Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00161 Published 2023-12-29 Fixed in 7.0.0.129 CWE-843

TI-2023-28080 CVE-2023-51426 · GHSA-m377-c76r-596q

Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.

LOW 30

Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00161 Published 2023-12-29 Fixed in 7.0.0.129 CWE-843

TI-2023-06342 CVE-2023-6939 · GHSA-6348-qpvc-cw5w

Some Honor products are affected by type confusion vulnerability, successful exploitation could cause denial of service.

LOW 24

Some Honor products are affected by type confusion vulnerability, successful exploitation could cause denial of service.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00162 Published 2023-12-29 Fixed in 6.0.0.217 CWE-843

TI-2023-09285 CVE-2023-23443 · GHSA-fqg5-7rjv-45wh

Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.

LOW 30

Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00161 Published 2023-12-29 Fixed in 7.0.0.156 CWE-843

TI-2023-09283 CVE-2023-23441 · GHSA-xqmc-g86x-qfxp

Out-of-bounds read in Honor Magic UI

LOW 26

Some Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00169 Published 2023-12-29 Fixed in 6.1.0.500 CWE-125

TI-2023-09272 CVE-2023-23430 · GHSA-q9f4-6pf9-qvh4

Improper privilege management in Honor com.hihonor.magichome

LOW 33

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00305 Published 2023-12-29 Fixed in 7.60.10.303 CWE-269

TI-2023-09268 CVE-2023-23426 · GHSA-jqpm-4rcf-qhrx

Some Honor products are affected by file writing vulnerability, successful exploitation…

LOW 28

Some Honor products are affected by file writing vulnerability, successful exploitation could cause information disclosure.

CVSS 3.1MEDIUM 6.6 Local No auth User interaction EPSS 0.00167 Published 2023-12-29 Fixed in 7.0.0.193

TI-2023-09267 CVE-2023-23424 · GHSA-pcxg-g343-mxxx

Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution

MEDIUM 49

Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00561 Published 2023-12-29 Fixed in 7.0.0.120

TI-2023-09282 CVE-2023-23440 · GHSA-7jfc-pfh4-4gx2

Some Honor products are affected by information leak vulnerability, successful…

LOW 24

Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00166 Published 2023-12-29 Fixed in 7.0.0.171

TI-2023-09281 CVE-2023-23439 · GHSA-p56m-p9rr-p55q

Some Honor products are affected by information leak vulnerability, successful…

LOW 24

Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00162 Published 2023-12-29 Fixed in 7.0.0.171

TI-2023-09280 CVE-2023-23438 · GHSA-2j82-v6wc-3928

Improper privilege management in Honor LGE-AN00

LOW 24

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00144 Published 2023-12-29 Fixed in 6.0.0.188 CWE-269

TI-2023-09279 CVE-2023-23437 · GHSA-q6jh-8fjm-g6wr

Insecure storage of sensitive information in Honor com.hihonor.vmall

LOW 24

Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00166 Published 2023-12-29 Fixed in 2.3.3.300 CWE-922

TI-2023-09276 CVE-2023-23434 · GHSA-3hpp-7g65-f848

Some Honor products are affected by information leak vulnerability, successful…

LOW 24

Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00168 Published 2023-12-29 Fixed in 7.2.8.100

TI-2023-09275 CVE-2023-23433 · GHSA-ppwv-ccv8-qf82

Improper signature verification in Honor NTH-AN00

LOW 30

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00113 Published 2023-12-29 Fixed in 7.0.0.157 CWE-347

TI-2023-09273 CVE-2023-23431 · GHSA-jfvx-rjp6-p69p

Improper signature verification in Honor NTH-AN00

LOW 31

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file.

CVSS 3.1HIGH 7.3 Local No auth No interaction EPSS 0.00119 Published 2023-12-29 Fixed in 7.0.0.157 CWE-347

TI-2023-09274 CVE-2023-23432 · GHSA-45hv-4hc6-jvf2

Improper signature verification in Honor NTH-AN00

LOW 31

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file.

CVSS 3.1HIGH 7.3 Local No auth No interaction EPSS 0.00113 Published 2023-12-29 Fixed in 7.0.0.157 CWE-347

Vulnerabilities

Filters