CVE-2023-52954
Published: 08 January 2025
Description
Vulnerability of improper permission control in the Gallery module Impact: Successful exploitation of this vulnerability may affect availability.
Security Summary
CVE-2023-52954 is a vulnerability involving improper permission control in the Gallery module. It affects Huawei consumer products and was published on 2025-01-08 with a CVSS v3.1 base score of 4.4 (AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L). The issue is linked to CWEs-701 (Incorrect Control Flow Scoping) and CWE-276 (Incorrect Default Permissions).
A local attacker can exploit this vulnerability with low attack complexity, requiring user interaction but no special privileges. Successful exploitation may result in low-impact effects on confidentiality and availability, with no impact on integrity.
Huawei's security bulletin at https://consumer.huawei.com/en/support/bulletin/2025/1/ provides details on the vulnerability, including mitigation recommendations for affected devices.
Details
- CWE(s)