3776 matches found
Design/Logic Flaw
In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed...
Information disclosure
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2022-42488
OpenHarmony-v3.1.2 and prior versions have a Missing permission validation vulnerability in param service of startup subsystem. An malicious application installed on the device could elevate its privileges to the root user, disable security features, or cause DoS by disabling particular services...
Input validation
OpenHarmony-v3.1.2 and prior versions have a Missing permission validation vulnerability in param service of startup subsystem. An malicious application installed on the device could elevate its privileges to the root user, disable security features, or cause DoS by disabling particular services...
CVE-2022-42488
OpenHarmony CVE-2022-42488 affects OpenHarmony versions 3.1.2 and earlier. The root cause is missing permission validation in the param service of the startup subsystem, which could let a malicious app elevate privileges to root, disable security features, or cause denial of service by stopping s...
CVE-2022-38679
In music service, there is a missing permission check. This could lead to local denial of service in music service with no additional execution privileges needed...
CVE-2022-38679
In music service, there is a missing permission check. This could lead to local denial of service in music service with no additional execution privileges needed...
CVE-2022-38670
In soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed...
CVE-2022-39110
In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed...
PT-2022-24729 · Unknown · Gallery Service
Name of the Vulnerable Software and Affected Versions: Gallery service affected versions not specified Description: The issue is related to a missing permission check in the Gallery service, which could lead to a local denial of service. This can be achieved without requiring additional execution...
PT-2022-24732 · Unknown · Soundrecorder Service
Name of the Vulnerable Software and Affected Versions: Soundrecorder service affected versions not specified Description: The issue is related to a missing permission check in the Soundrecorder service. This could potentially lead to elevation of privilege in the Soundrecorder service, with no...
CVE-2022-39107
In Soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in Soundrecorder service with no additional execution privileges needed...
PT-2022-24740 · Unknown · Music Service
Name of the Vulnerable Software and Affected Versions: Music service affected versions not specified Description: The issue is related to a missing permission check in the Music service, which could lead to a local denial of service with no additional execution privileges needed. Recommendations:...
CVE-2022-39113
The CVE-2022-39113 entry involves a missing permission check in the Music service that could allow local denial of service without extra privileges. Connected documents corroborate a local impact but do not provide concrete product/version details for the Music service itself. Some sources refere...
CVE-2022-39114
In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed...
CVE-2022-39103
The CVE-2022-39103 entry concerns the Gallery service, where a missing permission check is the root cause. This vulnerability could permit local denial of service without requiring additional execution privileges. Publicly provided documents reiterate the issue but do not specify affected version...
CVE-2022-39110
In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed...
CVE-2022-39109
In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed...
PT-2022-24736 · Unknown · Music Service
Name of the Vulnerable Software and Affected Versions: Music service affected versions not specified Description: The issue is related to a missing permission check in the Music service, which could lead to elevation of privilege with no additional execution privileges needed. Recommendations: At...