CVE-2022-44455

Summary

The appspawn and nwebspawn services within OpenHarmony-v3.1.2 and prior versions were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation. An unprivileged malicious application would be able to gain code execution within any application installed on the device or cause application crash.

Affected Software

Weaknesses

• CWE-120: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

CVE Program Container

Additional References

• https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-12.md

References

• https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-12.md

• ←Previous
• Next→