CVE-2024-45448mediumCWE-1259

CVE-2024-45448: medium-severity vulnerability in Huawei EMUI

Published · Updated

Follow this CVE+ Monitor HarmonyOS+ Monitor EMUI

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.1epss 0.1%
In short

A vulnerability in the trusted firmware's page table protection settings could allow an attacker to bypass memory protections and access sensitive data. This affects the confidentiality of the system's information.

Technical detail

CWE-1259 configuration vulnerability in trusted firmware page table protection mechanisms. Exploitation requires ability to interact with the affected firmware component and may lead to unauthorized memory access and information disclosure.

Summary generated and translated by AI from the official description.
Page table protection configuration vulnerability in the trusted firmware module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected products
Huawei · EMUIHuawei · HarmonyOS
Related CVEs — Huawei EMUI

In the same product, most dangerous first.

CVE-2021-37095—CVE-2021-37095EPSS 1.4%CVE-2021-40050—CVE-2021-40050EPSS 1.1%CVE-2021-39979—CVE-2021-39979EPSS 1.1%CVE-2021-40014—CVE-2021-40014EPSS 1.0%CVE-2021-37022—CVE-2021-37022EPSS 1.0%CVE-2021-22387—CVE-2021-22387EPSS 0.9%