Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2022-44455

The appspawn and nwebspawn services were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OpenHarmony

Description

The appspawn and nwebspawn services within OpenHarmony-v3.1.2 and prior versions were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation. An unprivileged malicious application would be able to gain code execution within any application installed on the device or cause application crash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenHarmony OpenHarmony

  • 3.1.0affected
  • 3.0.0affected

References