CVE-2024-42037

The bug results from improper exception handling in the module responsible for graphics (Graphics module). An unhandled exception can be triggered locally without the need for privileges or user interaction. According to the CVSS vector, the vulnerability has a scope extending beyond the attacked component (Scope: Changed), which may indicate the possibility of affecting isolated system components.

Successful exploitation of the vulnerability may result in a breach of confidentiality of data processed by the device. The high level of integrity and availability indicators in the CVSS vector suggests potentially broader impact on system stability and security.

Apply patches available from the manufacturer according to the references — Huawei security bulletin available at: https://consumer.huawei.com/en/support/bulletin/2024/8/

Devices with Huawei EMUI and Huawei HarmonyOS systems — specific versions indicated in the manufacturer's references (Huawei security bulletin from August 2024).