CVE-2022-38064

OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability. Local attackers can bypass permission control and get sensitive information...

CVE-2022-38064

OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability. Local attackers can bypass permission control and get sensitive information...

CVE-2022-36423

OpenHarmony-v3.1.2 and prior versions have an incorrect configuration of the cJSON library, which leads a Stack overflow vulnerability during recursive parsing. LAN attackers can lead a DoS attack to all network devices...

CVE-2022-36423

OpenHarmony-v3.1.2 and prior versions have an incorrect configuration of the cJSON library, which leads a Stack overflow vulnerability during recursive parsing. LAN attackers can lead a DoS attack to all network devices...

Design/Logic Flaw

OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability. LAN attackers can bypass the distributed permission control.To take advantage of this weakness, attackers need another vulnerability to obtain system...

Stack overflow

OpenHarmony-v3.1.2 and prior versions have an incorrect configuration of the cJSON library, which leads a Stack overflow vulnerability during recursive parsing. LAN attackers can lead a DoS attack to all network devices...

Design/Logic Flaw

OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability. Local attackers can bypass permission control and get sensitive information...

Heap overflow

OpenHarmony-v3.1.2 and prior versions have a heap overflow vulnerability. Local attackers can trigger a heap overflow and get network sensitive information...

Design/Logic Flaw

OpenHarmony-v3.1.1 and prior versions have a permission bypass vulnerability. LAN attackers can bypass permission control and get control of camera service...

CVE-2022-38701 IPC in communication subsystem has a heap overflow vulnerability. Local attackers can trigger a heap overflow and get network sensitive information.

OpenHarmony-v3.1.2 and prior versions have a heap overflow vulnerability. Local attackers can trigger a heap overflow and get network sensitive information...

CVE-2022-38701

CVE-2022-38701 describes a heap overflow in the OpenHarmony IPC/communication subsystem affecting OpenHarmony v3.1.2 and earlier. The vulnerability enables a local attacker to trigger a heap overflow and potentially access network-sensitive information. Publicly referenced sources (e.g., CVE reco...

CVE-2022-38064

OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability. Local attackers can bypass permission control and get sensitive information...

CVE-2022-38064 windowmanager in window subsystem has a permission bypass vulnerability. Local attackers can bypass permission control and get sensitive information.

OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability. Local attackers can bypass permission control and get sensitive information...

CVE-2022-38700 multimedia subsystem has a permission bypass vulnerability. LAN attackers can bypass permission control and get control of camera service.

OpenHarmony-v3.1.1 and prior versions have a permission bypass vulnerability. LAN attackers can bypass permission control and get control of camera service...

CVE-2022-38700

OpenHarmony vulnerable component: multimedia/camera service in OpenHarmony v3.1.1 and earlier. Root cause: permission-bypass in the camera service, enabling LAN-access attackers (AV:A, AC:L, PR:N, UI:N) to bypass permission controls and gain control of the camera service. Impact per CVSS: Confide...

CVE-2022-38081

OpenHarmony OpenHarmony-v3.1.2 and earlier are affected by a permissions bypass in the Tokensync security subsystem that allows LAN attackers to bypass distributed permission control, requiring another vulnerability to obtain system access. Affected versions: OpenHarmony before 3.1.2. Impact: int...

CVE-2022-38064

OpenHarmony OpenHarmony v3.1.2 and earlier are affected by a permission bypass in the window subsystem. Local attackers can bypass permission checks to access sensitive information. The public documents consistently describe affected versions (prior to 3.1.2) and the local-attack vector, but do n...

CVE-2022-36423

OpenHarmony v3.1.2 and earlier are affected by a stack overflow when parsing with a misconfigured cJSON library. This enables LAN attackers to cause denial of service on network devices. Root cause: incorrect cJSON configuration; affected component is the library used during recursive parsing. Im...

OpenHarmony 授权问题漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony v3.1.1 and earlier versions, which stems from the presence of a privilege bypass vulnerability that allows a LAN attacker to bypass...

OpenHarmony 授权问题漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony-v3.1.2 version and earlier versions, which can be exploited by LAN attackers to bypass distributed privilege control...