InputMethod
by Huawei
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-21337 | 0.00 | — | 0.00 | Oct 30, 2023 | In InputMethod, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not… | |||
| CVE-2023-26547 | 0.00 | — | 0.00 | Mar 27, 2023 | The InputMethod module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation. |
- CVE-2023-21337Oct 30, 2023risk 0.00cvss —epss 0.00
In InputMethod, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not…
- CVE-2023-26547Mar 27, 2023risk 0.00cvss —epss 0.00
The InputMethod module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation.