CVE-2024-56446
Published: 08 January 2025
Description
Vulnerability of variables not being initialized in the notification module Impact: Successful exploitation of this vulnerability may affect availability.
Security Summary
CVE-2024-56446 is a vulnerability involving variables not being initialized in the notification module of Huawei consumer products. Published on January 8, 2025, it carries a CVSS v3.1 base score of 4.0 (AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) and maps to CWE-457 (Use of Uninitialized Variable) and CWE-908 (Use of Uninitialized Resource). Successful exploitation impacts availability.
A local attacker can exploit this vulnerability with low complexity, no required privileges, and no user interaction. Exploitation disrupts availability, potentially leading to denial-of-service conditions in the affected notification module.
Huawei has published a support bulletin at https://consumer.huawei.com/en/support/bulletin/2025/1/ addressing this issue, which security practitioners should consult for mitigation details and available patches.
Details
- CWE(s)