CVE-2023-49142

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia audio crash through modify a released pointer...

CVE-2023-47857

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia camera crash through modify a released pointer...

CVE-2023-49142 multimedia audio has a UAF vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia audio crash through modify a released pointer...

CVE-2023-49142 multimedia audio has a UAF vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia audio crash through modify a released pointer...

CVE-2023-49135 multimedia player has a UAF vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer...

OpenHarmony has an unspecified vulnerability

OpenHarmony is a kind of hongmeng operating system open source project. A security vulnerability exists prior to OpenHarmony version v3.2.2, which can be exploited by an attacker to obtain sensitive buffer information by using uninitialized resources...

OpenHarmony Code Execution Vulnerability

OpenHarmony is a kind of hongmeng operating system of open source projects. A code execution vulnerability exists in OpenHarmony prior to version v3.2.2, which can be exploited by an attacker to execute arbitrary code...

CVE-2023-47217

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause DOS through buffer overflow...

Type confusion

in OpenHarmony v3.2.2 and prior versions allow a local attacker causes system information leak through type confusion...

Information disclosure

in OpenHarmony v3.2.2 and prior versions allow a local attacker get sensitive buffer information through use of uninitialized resource...

Buffer overflow

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause DOS through buffer overflow...

CVE-2023-47217

OpenHarmony is affected by CVE-2023-47217 in v3.2.2 and earlier, where a buffer overflow can enable a local attacker to cause a denial of service. The root cause is a buffer overflow in the vulnerable component; exact vulnerable module/function is not specified in the provided documents. Impact i...

CVE-2023-47217 Arkruntime has a buffer overflow vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause DOS through buffer overflow...

CVE-2023-46100 Cert manager has a use of uninitialized resource vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker get sensitive buffer information through use of uninitialized resource...

CVE-2023-46705

OpenHarmony vulnerability CVE-2023-46705 affects OpenHarmony v3.2.2 and earlier. A local attacker can trigger a type confusion to leak system information. The issue is described as a local, low-privilege condition with high confidentiality impact; no exploitation vector details are provided in th...

CVE-2023-46705 Arkruntime has a type confusion vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker causes system information leak through type confusion...

CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

Design/Logic Flaw

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

CVE-2023-48052

CVE-2023-48052 affects HTTPie v3.2.2, where missing SSL certificate validation enables a network-based MITM, allowing eavesdropping and compromising confidentiality and integrity. CVSS v3.1 vectors reflect network access, high impact on confidentiality and integrity, and no user interaction requi...