Design/Logic Flaw

OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability. LAN attackers can bypass the distributed permission control.To take advantage of this weakness, attackers need another vulnerability to obtain system...

Design/Logic Flaw

OpenHarmony-v3.1.1 and prior versions have a permission bypass vulnerability. LAN attackers can bypass permission control and get control of camera service...

CVE-2022-38701 IPC in communication subsystem has a heap overflow vulnerability. Local attackers can trigger a heap overflow and get network sensitive information.

OpenHarmony-v3.1.2 and prior versions have a heap overflow vulnerability. Local attackers can trigger a heap overflow and get network sensitive information...

CVE-2022-38701

CVE-2022-38701 describes a heap overflow in the OpenHarmony IPC/communication subsystem affecting OpenHarmony v3.1.2 and earlier. The vulnerability enables a local attacker to trigger a heap overflow and potentially access network-sensitive information. Publicly referenced sources (e.g., CVE reco...

CVE-2022-38081

OpenHarmony OpenHarmony-v3.1.2 and earlier are affected by a permissions bypass in the Tokensync security subsystem that allows LAN attackers to bypass distributed permission control, requiring another vulnerability to obtain system access. Affected versions: OpenHarmony before 3.1.2. Impact: int...

CVE-2022-38064 windowmanager in window subsystem has a permission bypass vulnerability. Local attackers can bypass permission control and get sensitive information.

OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability. Local attackers can bypass permission control and get sensitive information...

CVE-2022-38700

OpenHarmony vulnerable component: multimedia/camera service in OpenHarmony v3.1.1 and earlier. Root cause: permission-bypass in the camera service, enabling LAN-access attackers (AV:A, AC:L, PR:N, UI:N) to bypass permission controls and gain control of the camera service. Impact per CVSS: Confide...

CVE-2022-38064

OpenHarmony OpenHarmony v3.1.2 and earlier are affected by a permission bypass in the window subsystem. Local attackers can bypass permission checks to access sensitive information. The public documents consistently describe affected versions (prior to 3.1.2) and the local-attack vector, but do n...

CVE-2022-36423

OpenHarmony v3.1.2 and earlier are affected by a stack overflow when parsing with a misconfigured cJSON library. This enables LAN attackers to cause denial of service on network devices. Root cause: incorrect cJSON configuration; affected component is the library used during recursive parsing. Im...

CVE-2022-38700 multimedia subsystem has a permission bypass vulnerability. LAN attackers can bypass permission control and get control of camera service.

OpenHarmony-v3.1.1 and prior versions have a permission bypass vulnerability. LAN attackers can bypass permission control and get control of camera service...

PT-2022-24536 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.1.2 Description: The issue is a heap overflow vulnerability that can be triggered by local attackers, allowing them to obtain network sensitive information. Recommendations: For OpenHarmony versions prior to...

PT-2022-24535 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.1.1 Description: The issue allows LAN attackers to bypass permission control, gaining control of the camera service. Recommendations: For OpenHarmony versions prior to 3.1.1, at the moment, there is no...

OpenHarmony 授权问题漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation Foundation. An authorization issue vulnerability exists in OpenHarmony-v3.1.2 and earlier versions, which can be exploited by local attackers to bypass privilege control and obtain sensitive...

PT-2022-24192 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.1.2 Description: The issue allows LAN attackers to bypass distributed permission control, but to exploit this, attackers need another vulnerability to obtain system access. Recommendations: For OpenHarmony...

OpenHarmony 缓冲区错误漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony v3.1.2 and earlier versions, which stems from the presence of a heap overflow vulnerability that could allow a local attacker to trigger a...

OpenHarmony 授权问题漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony v3.1.1 and earlier versions, which stems from the presence of a privilege bypass vulnerability that allows a LAN attacker to bypass...

OpenHarmony 授权问题漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony-v3.1.2 version and earlier versions, which can be exploited by LAN attackers to bypass distributed privilege control...

OpenHarmony 缓冲区错误漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation Foundation. A buffer error vulnerability exists in OpenHarmony version v3.1.2 and earlier versions, which stems from an incorrect configuration of the cJSON library, resulting in a stack overflow...

PT-2022-24181 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.1.2 Description: The issue allows local attackers to bypass permission control, potentially gaining access to sensitive information. Recommendations: For OpenHarmony versions prior to 3.1.2, at the moment, ther...

CVE-2022-36423

OpenHarmony-v3.1.2 and prior versions have an incorrect configuration of the cJSON library, which leads a Stack overflow vulnerability during recursive parsing. LAN attackers can lead a DoS attack to all network devices...