CVE-2023-31225

State: Published
Severity: 3.3 Low
Published: May 26, 2023
Updated: Jan 16, 2025
Reserved: Apr 26, 2023

Description

The Gallery app has the risk of hijacking attacks. Successful exploitation of this vulnerability may cause download failures and affect product availability.

Scores

CVSS	Score	Vector	Source
3.1	3.3 Low	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L	CISA-ADP

Weaknesses

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

Product	Versions
HarmonyOSHuawei	3.1.0Affected 3.0.0Affected 2.0.1Affected 2.0.0Affected
EMUIHuawei	13.0.0Affected 12.0.1Affected 12.0.0Affected 11.0.1Affected

References

https://consumer.huawei.com/en/support/bulletin/2023/5/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.