CVE-2024-56444
Huawei Harmonyos 5.0.0
Raw vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.
Summary
CVE-2024-56444 is a high-severity an unspecified weakness vulnerability in Huawei Harmonyos. Its CVSS base score is 7.5 (High).
Operationally, ranked at the 18th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
Deeper analysis AI-assisted summary
Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.
CVE-2024-56444 is a cross-process screen stack vulnerability in the UIExtension module. Published on January 8, 2025, it carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) and is associated with CWE-264 (Permissions, Privileges, and Access Controls). Successful exploitation may affect service confidentiality.
Remote attackers require no privileges or user interaction and can exploit the vulnerability over the network with low attack complexity. Exploitation enables high-impact confidentiality violations, such as unauthorized access to sensitive service data, while integrity and availability remain unaffected.
Huawei has published a security bulletin addressing this issue at https://consumer.huawei.com/en/support/bulletin/2025/1/, which likely details affected versions and mitigation steps.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-53153
Vulnerability Data
Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- CWE(s)
Related Threats
CVEs Like This One
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.