CVE-2023-37245

CRITICAL

Huawei EMUI and HarmonyOS - Buffer Overflow in Modem Pinctrl Module

Title source: llm
STIX 2.1

Description

Buffer overflow vulnerability in the modem pinctrl module. Successful exploitation of this vulnerability may affect the integrity and availability of the modem.

Scores

CVSS v3 9.1
EPSS 0.0049
EPSS Percentile 39.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-120
Status published
Products (5)
huawei/emui 12.0.0
huawei/emui 13.0.0
huawei/harmonyos 2.0
huawei/harmonyos 2.1
huawei/harmonyos 3.0.0
Published Jul 06, 2023
Tracked Since Feb 18, 2026