Code injection

2024-01-1610:15:00

PRIOn knowledge base

www.prio-n.com

code injection

downloadprovidermain

api permission

integrity

availability

nvd

7.1 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.8%

JSON

The DownloadProviderMain module has a vulnerability in API permission verification. Successful exploitation of this vulnerability may affect integrity and availability.

CPENameOperatorVersion
harmonyoseq4.0.0

CPE	Name	Operator	Version
	harmonyos	eq	4.0.0

References

consumer.huawei.com/en/support/bulletin/2024/1/

device.harmonyos.com/en/docs/security/update/security-bulletins-202401-0000001799925977