Files
vuln-cve/data/2026/41xxx/CVE-2026-41977.json
T

164 lines
5.9 KiB
JSON
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-41977",
"assignerOrgId": "25ac1063-e409-4190-8079-24548c77ea2e",
"state": "PUBLISHED",
"assignerShortName": "huawei",
"dateReserved": "2026-04-23T01:42:44.929Z",
"datePublished": "2026-06-09T07:00:42.946Z",
"dateUpdated": "2026-06-09T12:59:21.495Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "25ac1063-e409-4190-8079-24548c77ea2e",
"shortName": "huawei",
"dateUpdated": "2026-06-09T07:00:42.946Z"
},
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-190",
"description": "CWE-190 Integer overflow or wraparound",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Huawei",
"product": "HarmonyOS",
"versions": [
{
"status": "affected",
"version": "4.3.1"
},
{
"status": "affected",
"version": "4.3.0"
},
{
"status": "affected",
"version": "4.2.0"
},
{
"status": "affected",
"version": "4.0.0"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Huawei",
"product": "EMUI",
"versions": [
{
"status": "affected",
"version": "15.0.0"
},
{
"status": "affected",
"version": "14.2.0"
},
{
"status": "affected",
"version": "14.0.0"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "DoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may affect availability.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "DoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may affect availability."
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2026/6/"
},
{
"url": "https://consumer.huawei.com/en/support/bulletinvision/2026/6/"
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV3_1": {
"version": "3.1",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "LOW",
"baseSeverity": "MEDIUM",
"baseScore": 5,
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L"
}
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.2"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-06-09T12:59:11.880350Z",
"id": "CVE-2026-41977",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-06-09T12:59:21.495Z"
}
}
]
}
}