CVE-2024-56438
Published: 08 January 2025
Description
Vulnerability of improper memory address protection in the HUKS module Impact: Successful exploitation of this vulnerability may affect availability.
Security Summary
CVE-2024-56438 is a vulnerability involving improper memory address protection in the HUKS module. It is classified under CWE-119 and has a CVSS v3.1 base score of 6.0 (AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H). The vulnerability was published on 2025-01-08.
Exploitation requires local access (AV:L) with high privileges (PR:H), low attack complexity (AC:L), and no user interaction (UI:N). A successful attack can achieve high impact on availability (A:H) with a changed scope (S:C), potentially disrupting system services.
Mitigation details are provided in the Huawei security bulletin at https://consumer.huawei.com/en/support/bulletin/2025/1/.
Details
- CWE(s)