The DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may affect system availability.
Weakness
The product calls free() twice on the same memory address.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Emui | Huawei | 12.0.0 (including) | 12.0.0 (including) |
Potential Mitigations
References
- https://consumer.huawei.com/en/support/bulletin/2023/1/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202301-0000001435541166
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474
- https://consumer.huawei.com/en/support/bulletin/2023/1/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202301-0000001435541166
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474