CVE-2023-0083

Summary

The ArKUI framework subsystem within OpenHarmony-v3.1.5 and prior versions,

OpenHarmony-v3.0.7 and prior versions

has an Improper Input Validation vulnerability which local attackers can exploit this vulnerability to send malicious data, causing the current application to crash.

Affected Software

Weaknesses

• CWE-843: CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')

ADP Enrichment

CVE Program Container

Additional References

• https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-02.md

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-02.md

• ←Previous
• Next→