deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-30650
Published: 2023-07-06
Description: Out of bounds read and write in callrunTspCmd of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07
CVE: CVE-2023-30651
Published: 2023-07-06
Description: Out of bounds read and write in callgetTspsysfs of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07
CVE: CVE-2023-30652
Published: 2023-07-06
Description: Out of bounds read and write in callrunTspCmdNoRead of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07
CVE: CVE-2023-30653
Published: 2023-07-06
Description: Out of bounds read and write in enableTspDevice of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07
CVE: CVE-2023-30655
Published: 2023-07-06
Description: Improper input validation vulnerability in SCEPProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities.
CVSS Score: 8.5 (HIGH)
CWE: CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07
CVE: CVE-2023-30656
Published: 2023-07-06
Description: Improper input validation vulnerability in LSOItemData prior to SMR Jul-2023 Release 1 allows attackers to launch certain activities.
CVSS Score: 8.5 (HIGH)
CWE: CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07
CVE: CVE-2023-30657
Published: 2023-07-06
Description: Improper input validation vulnerability in EnhancedAttestationResult prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07
CVE: CVE-2023-30658
Published: 2023-07-06
Description: Improper input validation vulnerability in DataProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities.
CVSS Score: 8.5 (HIGH)
CWE: CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07
CVE: CVE-2023-30659
Published: 2023-07-06
Description: Improper input validation vulnerability in Transaction prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07
CVE: CVE-2023-30660
Published: 2023-07-06
Description: Exposure of Sensitive Information vulnerability in getDefaultChipId in UwbAospAdapterService prior to SMR Jul-2023 Release 1 allows local attackers to access the UWB chipset Identifier.
CVSS Score: 6.2 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07
CVE: CVE-2023-30661
Published: 2023-07-06
Description: Exposure of Sensitive Information vulnerability in getChipInfos in UwbAospAdapterService prior to SMR Jul-2023 Release 1 allows local attackers to access the UWB chipset Identifier.
CVSS Score: 6.2 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07
CVE: CVE-2023-30662
Published: 2023-07-06
Description: Exposure of Sensitive Information vulnerability in getChipIds in UwbAospAdapterService prior to SMR Jul-2023 Release 1 allows local attackers to access the UWB chipset Identifier.
CVSS Score: 6.2 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07
CVE: CVE-2023-30663
Published: 2023-07-06
Description: Improper input validation vulnerability in OemPersonalizationSetLock in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cause an Out-Of-Bounds write.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07
CVE: CVE-2023-30664
Published: 2023-07-06
Description: Improper input validation vulnerability in RegisteredMSISDN prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities.
CVSS Score: 8.5 (HIGH)
CWE: CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07
CVE: CVE-2023-30665
Published: 2023-07-06
Description: Improper input validation vulnerability in OnOemServiceMode in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cause an Out-Of-Bounds read.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07
CVE: CVE-2023-30666
Published: 2023-07-06
Description: Improper input validation vulnerability in DoOemImeiSetPreconfig in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cause an Out-Of-Bounds write.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07
CVE: CVE-2023-30667
Published: 2023-07-06
Description: Improper access control in Audio system service prior to SMR Jul-2023 Release 1 allows attacker to send broadcast with system privilege.
CVSS Score: 5.1 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07
CVE: CVE-2023-30668
Published: 2023-07-06
Description: Out-of-bounds Write in BuildOemSecureSimLockResponse of libsec-ril prior to SMR Jul-2023 Release 1 allows local attacker to execute arbitrary code.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07
CVE: CVE-2023-30669
Published: 2023-07-06
Description: Out-of-bounds Write in DoOemFactorySendFactoryTestResult of libsec-ril prior to SMR Jul-2023 Release 1 allows local attacker to execute arbitrary code.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07
CVE: CVE-2023-30670
Published: 2023-07-06
Description: Out-of-bounds Write in BuildIpcFactoryDeviceTestEvent of libsec-ril prior to SMR Jul-2023 Release 1 allows local attacker to execute arbitrary code.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07
CVE: CVE-2023-30671
Published: 2023-07-06
Description: Logic error in package installation via adb command prior to SMR Jul-2023 Release 1 allows local attackers to downgrade installed application.
CVSS Score: 6.3 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07
CVE: CVE-2023-30672
Published: 2023-07-06
Description: Improper privilege management vulnerability in Samsung Smart Switch for Windows Installer prior to version 4.3.23043_3 allows attackers to cause permanent DoS via directory junction.
CVSS Score: 6.8 (MEDIUM)
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=07; https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=07
CVE: CVE-2023-30673
Published: 2023-07-06
Description: Improper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3.23052_1 allows local attackers to delete arbitrary directory using directory junction.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-354
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=07; https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=07
CVE: CVE-2023-30674
Published: 2023-07-06
Description: Improper configuration in Samsung Internet prior to version 21.0.0.41 allows attacker to bypass SameSite Cookie.
CVSS Score: 6.5 (MEDIUM)
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=07; https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=07
CVE: CVE-2023-30675
Published: 2023-07-06
Description: Improper authentication in Samsung Pass prior to version 4.2.03.1 allows local attacker to access stored account information when Samsung Wallet is not installed.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-287
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=07; https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=07
CVE: CVE-2023-30676
Published: 2023-07-06
Description: Improper access control vulnerability in Samsung Pass prior to version 4.2.03.1 allows physical attackers to access data of Samsung Pass.
CVSS Score: 4.6 (MEDIUM)
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=07; https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=07
CVE: CVE-2023-30677
Published: 2023-07-06
Description: Improper access control vulnerability in Samsung Pass prior to version 4.2.03.1 allows physical attackers to access data of Samsung Pass on a certain state of an unlocked device.
CVSS Score: 6.1 (MEDIUM)
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=07; https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=07
CVE: CVE-2023-30678
Published: 2023-07-06
Description: Potential zip path traversal vulnerability in Calendar application prior to version 12.4.07.15 in Android 13 allows attackers to write arbitrary file.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-22
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=07; https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=07
CVE: CVE-2023-26137
Published: 2023-07-06
Description: All versions of the package drogonframework/drogon are vulnerable to HTTP Response Splitting when untrusted user input is used to build header values in the addHeader and addCookie functions. An attacker can add the \r\n (carriage return line feeds) characters to end the HTTP response headers and inject malicious content.
CVSS Score: 7.2 (HIGH)
CWE: CWE-113, CWE-444
References: https://gist.github.com/dellalibera/666d67165830ded052a1ede2d2c0b02a; https://security.snyk.io/vuln/SNYK-UNMANAGED-DROGONFRAMEWORKDROGON-5665554; https://gist.github.com/dellalibera/666d67165830ded052a1ede2d2c0b02a
CVE: CVE-2023-26138
Published: 2023-07-06
Description: All versions of the package drogonframework/drogon are vulnerable to CRLF Injection when untrusted user input is used to set request headers in the addHeader function. An attacker can add the \r\n (carriage return line feeds) characters and inject additional headers in the request sent.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-93, CWE-74
References: https://gist.github.com/dellalibera/d2abd809f32ec6c61be1f41d80edf61b; https://security.snyk.io/vuln/SNYK-UNMANAGED-DROGONFRAMEWORKDROGON-5665555; https://gist.github.com/dellalibera/d2abd809f32ec6c61be1f41d80edf61b
CVE: CVE-2023-3523
Published: 2023-07-06
Description: Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://github.com/gpac/gpac/commit/64201a26476c12a7dbd7ffb5757743af6954db96; https://huntr.dev/bounties/57e0be03-8484-415e-8b5c-c1fe4546eaac; https://github.com/gpac/gpac/commit/64201a26476c12a7dbd7ffb5757743af6954db96
CVE: CVE-2021-46892
Published: 2023-07-06
Description: Encryption bypass vulnerability in Maintenance mode. Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-701
References: https://consumer.huawei.com/en/support/bulletin/2023/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/7/
CVE: CVE-2021-46894
Published: 2023-07-06
Description: Use After Free (UAF) vulnerability in the uinput module.Successful exploitation of this vulnerability may lead to kernel privilege escalation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269, CWE-416
References: https://consumer.huawei.com/en/support/bulletin/2023/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/7/
CVE: CVE-2022-48507
Published: 2023-07-06
Description: Vulnerability of identity verification being bypassed in the storage module. Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-294, CWE-294
References: https://consumer.huawei.com/en/support/bulletin/2023/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/7/
CVE: CVE-2022-48508
Published: 2023-07-06
Description:  Inappropriate authorization vulnerability in the system apps. Successful exploitation of this vulnerability may affect service integrity.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264, CWE-863
References: https://consumer.huawei.com/en/support/bulletin/2023/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/7/
CVE: CVE-2022-48509
Published: 2023-07-06
Description: Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vulnerability may cause the program to exit abnormally.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-476, CWE-362
References: https://consumer.huawei.com/en/support/bulletin/2023/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/7/
CVE: CVE-2022-48510
Published: 2023-07-06
Description: Input verification vulnerability in the AMS module. Successful exploitation of this vulnerability will cause unauthorized operations.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://consumer.huawei.com/en/support/bulletin/2023/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/7/
CVE: CVE-2022-48511
Published: 2023-07-06
Description: Use After Free (UAF) vulnerability in the audio PCM driver module under special conditions. Successful exploitation of this vulnerability may cause audio features to perform abnormally.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-843, CWE-416
References: https://consumer.huawei.com/en/support/bulletin/2023/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/7/
CVE: CVE-2022-48512
Published: 2023-07-06
Description: Use After Free (UAF) vulnerability in the Vdecoderservice service. Successful exploitation of this vulnerability may cause the image decoding feature to perform abnormally.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-416
References: https://consumer.huawei.com/en/support/bulletin/2023/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/7/
CVE: CVE-2022-48513
Published: 2023-07-06
Description: Vulnerability of identity verification being bypassed in the Gallery module. Successful exploitation of this vulnerability may cause out-of-bounds access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-290, CWE-290
References: https://consumer.huawei.com/en/support/bulletin/2023/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/7/
CVE: CVE-2022-48514
Published: 2023-07-06
Description: The Sepolicy module has inappropriate permission control on the use of Netlink.Successful exploitation of this vulnerability may affect confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]
CVE: CVE-2022-48515
Published: 2023-07-06
Description: Vulnerability of inappropriate permission control in Nearby. Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-269
References: https://consumer.huawei.com/en/support/bulletin/2023/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/7/
CVE: CVE-2022-48516
Published: 2023-07-06
Description: Vulnerability that a unique value can be obtained by a third-party app in the DSoftBus module. Successful exploitation of this vulnerability will affect confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://consumer.huawei.com/en/support/bulletin/2023/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/7/
CVE: CVE-2022-48517
Published: 2023-07-06
Description: Unauthorized service access vulnerability in the DSoftBus module. Successful exploitation of this vulnerability will affect availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-701
References: https://consumer.huawei.com/en/support/bulletin/2023/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/7/
CVE: CVE-2022-48518
Published: 2023-07-06
Description: Vulnerability of signature verification in the iaware system being initialized later than the time when the system broadcasts are sent. Successful exploitation of this vulnerability may cause malicious apps to start upon power-on by spoofing the package names of apps in the startup trustlist, which affects system performance.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-701, CWE-665
References: https://consumer.huawei.com/en/support/bulletin/2023/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/7/
CVE: CVE-2022-48519
Published: 2023-07-06
Description: Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://consumer.huawei.com/en/support/bulletin/2023/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/7/
CVE: CVE-2022-48520
Published: 2023-07-06
Description: Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://consumer.huawei.com/en/support/bulletin/2023/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/7/
CVE: CVE-2023-1691
Published: 2023-07-06
Description: Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerability may cause features to perform abnormally.
CVSS Score: 7.5 (HIGH)
CWE: CWE-248
References: https://consumer.huawei.com/en/support/bulletin/2023/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/7/
CVE: CVE-2023-1695
Published: 2023-07-06
Description: Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerability may cause features to perform abnormally.
CVSS Score: 7.5 (HIGH)
CWE: CWE-755
References: https://consumer.huawei.com/en/support/bulletin/2023/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/7/
CVE: CVE-2023-34164
Published: 2023-07-06
Description: Vulnerability of incomplete input parameter verification in the communication framework module. Successful exploitation of this vulnerability may affect availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: https://consumer.huawei.com/en/support/bulletin/2023/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/7/
CVE: CVE-2023-37238
Published: 2023-07-06
Description: Vulnerability of apps' permission to access a certain API being incompletely verified in the wireless projection module. Successful exploitation of this vulnerability may affect some wireless projection features.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-275
References: https://consumer.huawei.com/en/support/bulletin/2023/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/7/
CVE: CVE-2023-37239
Published: 2023-07-06
Description: Format string vulnerability in the  distributed file system. Attackers who bypass the selinux permission can exploit this vulnerability to crash the program.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://consumer.huawei.com/en/support/bulletin/2023/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/7/
CVE: CVE-2023-37240
Published: 2023-07-06
Description: 
Vulnerability of missing input length verification in the  distributed file system. Successful exploitation of this vulnerability may cause out-of-bounds read.


CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125, CWE-125
References: https://consumer.huawei.com/en/support/bulletin/2023/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/7/
CVE: CVE-2023-37241
Published: 2023-07-06
Description: Input verification vulnerability in the WMS API. Successful exploitation of this vulnerability may cause the device to restart.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://consumer.huawei.com/en/support/bulletin/2023/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/7/