Information disclosure

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

Privilege escalation

In soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed...

Privilege escalation

In soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed...

Privilege escalation

In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed...

Denial of service

In Gallery service, there is a missing permission check. This could lead to local denial of service in Gallery service with no additional execution privileges needed...

Privilege escalation

In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed...

CVE-2022-42488

OpenHarmony-v3.1.2 and prior versions have a Missing permission validation vulnerability in param service of startup subsystem. An malicious application installed on the device could elevate its privileges to the root user, disable security features, or cause DoS by disabling particular services...

Input validation

OpenHarmony-v3.1.2 and prior versions have a Missing permission validation vulnerability in param service of startup subsystem. An malicious application installed on the device could elevate its privileges to the root user, disable security features, or cause DoS by disabling particular services...

CVE-2022-42488

OpenHarmony CVE-2022-42488 affects OpenHarmony versions 3.1.2 and earlier. The root cause is missing permission validation in the param service of the startup subsystem, which could let a malicious app elevate privileges to root, disable security features, or cause denial of service by stopping s...

PT-2022-24524

Name of the Vulnerable Software and Affected Versions cell service affected versions not specified Description The issue is related to a missing permission check in cell service, which could lead to a local denial of service. No additional execution privileges are needed to exploit this issue...

PT-2022-24525

Name of the Vulnerable Software and Affected Versions Music service affected versions not specified Description The issue is related to a missing permission check in the music service, which could lead to a local denial of service. No additional execution privileges are needed to exploit this...

CVE-2022-39111: Missing Authorization

In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed...

CVE-2022-38698: Missing Authorization

In messaging service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed...

PT-2022-24735 · Unknown · Music Service

Name of the Vulnerable Software and Affected Versions: Music service affected versions not specified Description: The issue is related to a missing permission check in the Music service, which could lead to elevation of privilege. No additional execution privileges are needed for this issue to...

CVE-2022-39109

In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed...

CVE-2022-39115

In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed...

CVE-2022-39107

In Soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in Soundrecorder service with no additional execution privileges needed...

PT-2022-24732 · Unknown · Soundrecorder Service

Name of the Vulnerable Software and Affected Versions: Soundrecorder service affected versions not specified Description: The issue is related to a missing permission check in the Soundrecorder service. This could potentially lead to elevation of privilege in the Soundrecorder service, with no...

CVE-2022-39109: Missing Authorization

In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed...

PT-2022-24736 · Unknown · Music Service

Name of the Vulnerable Software and Affected Versions: Music service affected versions not specified Description: The issue is related to a missing permission check in the Music service, which could lead to elevation of privilege with no additional execution privileges needed. Recommendations: At...