Summaryinfo

A vulnerability was found in Huawei EMUI and Magic UI and classified as problematic. This impacts an unknown function of the component Communication Framework. Such manipulation leads to uncaught exception. This vulnerability is uniquely identified as CVE-2023-1691. No exploit exists. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Detailsinfo

A vulnerability was found in Huawei EMUI and Magic UI (the affected version is unknown) and classified as problematic. Affected by this issue is an unknown code of the component Communication Framework. The manipulation with an unknown input leads to a uncaught exception vulnerability. Using CWE to declare the problem leads to CWE-248. An exception is thrown from a function, but it is not caught. Impacted is availability. CVE summarizes:

Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerability may cause features to perform abnormally.

The weakness was disclosed 07/06/2023. The advisory is shared for download at consumer.huawei.com. This vulnerability is handled as CVE-2023-1691 since 03/29/2023. There are neither technical details nor an exploit publicly available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 07/24/2023).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Smartphone Operating System

Vendor

• Huawei

Name

• EMUI
• Magic UI

License

• open-source

Website

• Vendor: https://www.huawei.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion