CVE-2023-26547

The InputMethod module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
huaweiCNA
---
---
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 12%
VendorProductVersion
huaweiemui
11.0.1
huaweiemui
12.0.0
huaweiemui
12.0.1
huaweiemui
13.0.0
huaweiharmonyos
2.0
huaweiharmonyos
2.0.1
huaweiharmonyos
2.1
huaweiharmonyos
3.0.0
huaweiharmonyos
3.1.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://consumer.huawei.com/en/support/bulletin/2023/3/
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505
https://consumer.huawei.com/en/support/bulletin/2023/3/
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505