CVE-2024-58112
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2024-58112 is an Exception capture failure vulnerability identified in the SVG parsing module of the ArkUI framework. This issue can potentially impact the availability of affected systems by allowing an attacker to cause the software to become unresponsive or crash. The exact cause of the vulnerability lies in the failure to properly handle exceptions during the SVG parsing process. Despite the availability impact, no data disclosure or unauthorized access is reportedly possible through this vulnerability. System administrators are advised to update their ArkUI framework as soon as a patch becomes available to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- HarmonyOS
Affected Vendors
- Huawei Technologies