CVE-2023-52110 – This CVE describes an out-of-bounds access vuln... (How to Fix)

Q: What is the severity of CVE-2023-52110?

CVE-2023-52110 has a CVSS score of 7.5 (HIGH). This CVE describes an out-of-bounds access vulnerability in Huawei sensor modules that could allow attackers to crash affected systems, affecting availability. It impacts Huawei devices running HarmonyOS with vulnerable sensor components. The vulnerability is rated CVSS 7.5 (High severity).

📋 TL;DR

This CVE describes an out-of-bounds access vulnerability in Huawei sensor modules that could allow attackers to crash affected systems, affecting availability. It impacts Huawei devices running HarmonyOS with vulnerable sensor components. The vulnerability is rated CVSS 7.5 (High severity).

💻 Affected Systems

Products:

Huawei devices with sensor modules

Versions: Specific HarmonyOS versions as detailed in Huawei security bulletins

Operating Systems: HarmonyOS

Default Config Vulnerable: ⚠️ Yes

Notes: Affects devices with sensor hardware; exact models listed in Huawei security bulletins.

📦 What is this software?

Harmonyos by Huawei

View all CVEs affecting Harmonyos →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Complete system crash or denial of service, potentially requiring physical device restart or factory reset.

🟠

Likely Case

Application crashes, sensor malfunctions, or temporary service disruption affecting device functionality.

🟢

If Mitigated

Minimal impact with proper patching and network segmentation limiting attack surface.

🌐 Internet-Facing: MEDIUM - Requires local access or network proximity to exploit, but could be combined with other vulnerabilities.

🏢 Internal Only: HIGH - Local attackers or malicious apps could exploit this to disrupt device operations.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Requires local access or malicious application execution; no public exploit code known.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: As specified in Huawei security bulletins for January 2024

Vendor Advisory: https://consumer.huawei.com/en/support/bulletin/2024/1/

Restart Required: Yes

Instructions:

1. Check for system updates in device settings. 2. Install latest security update from Huawei. 3. Restart device after installation.

🔧 Temporary Workarounds

Disable unnecessary sensors

all

Turn off non-essential sensors to reduce attack surface

Restrict app permissions

all

Limit sensor access to trusted applications only

🧯 If You Can't Patch

Isolate affected devices from untrusted networks
Implement application allowlisting to prevent malicious app execution

🔍 How to Verify

Check if Vulnerable:

Check device HarmonyOS version against affected versions in Huawei security bulletins

Check Version:

Settings > About phone > HarmonyOS version

Verify Fix Applied:

Verify installed security update includes January 2024 patches and device version is updated

📡 Detection & Monitoring

Log Indicators:

Sensor service crashes
Application crashes related to sensor access
Kernel panic logs

Network Indicators:

Unusual sensor data transmission patterns

SIEM Query:

event_type:crash AND (process:sensor* OR module:sensor*)

📊 Metadata

CVE ID: CVE-2023-52110

CVSS v3 Score: 7.5 (HIGH)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE: CWE-787

Published: January 16, 2024

Last Updated: June 20, 2025

🔗 References

https://consumer.huawei.com/en/support/bulletin/2024/1/ Not Applicable,Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-0000001799925977 Vendor Advisory
https://consumer.huawei.com/en/support/bulletin/2024/1/ Not Applicable,Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-0000001799925977 Vendor Advisory

📤 Share & Export

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2023-52110, you might also want to check these: