CVE-2023-23429: medium-severity vulnerability in Honor Magic OS
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4epss 0.3%
In short
Honor devices have a vulnerability where certain apps or processes are given more permissions than they should have, which can cause services to stop working properly.
Technical detail
An incorrect privilege assignment flaw (CWE-269) in Honor products allows processes or applications to operate with elevated permissions beyond their intended scope, potentially leading to denial of service or device service exceptions. Exploitation requires local access or the ability to interact with affected privileged components.
Summary generated and translated by AI from the official description.
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected products
Honor · Magic OSRelated CVEs — Honor Magic OS
In the same product, most dangerous first.