High · 7.5 CVE-2023-31227 EUVD-2023-35542GHSA-wh53-jcxh-p452

The hwPartsDFR module has a vulnerability in API calling verification. Successful exploitation of this vulnerability may affect device conf…

Published May 26, 2023 · Updated Jan 15, 2025 · Assigned by huawei

Vendor: Huawei Product: EMUI Product: HarmonyOS Category: Network devices

Description

The hwPartsDFR module has a vulnerability in API calling verification. Successful exploitation of this vulnerability may affect device confidentiality.

Affected products

Vendor	Product	Affected	Fixed
Huawei	HarmonyOS	3.1.0, 3.0.0, 2.1.0	—
Huawei	EMUI	13.0.0	—

References

https://consumer.huawei.com/en/support/bulletin/2023/5/