CVE-2023-39389CWE-120CWE-1285

CVE-2023-39389: vulnerability in Huawei EMUI

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.4%
In short

The PMS module doesn't properly check user inputs, which can be exploited to make the home screen unavailable. This is a simple input validation flaw that impacts system usability.

Technical detail

CWE-120 and CWE-1285 indicate buffer overflow and improper input validation in the PMS module. An attacker can supply crafted input parameters that bypass validation checks, triggering a denial-of-service condition that renders the home screen inaccessible.

Summary generated and translated by AI from the official description.
Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailability.