Vulnerability Description
The appspawn and nwebspawn services within OpenHarmony-v3.1.2 and prior versions were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation. An unprivileged malicious application would be able to gain code execution within any application installed on the device or cause application crash.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Openharmony | Openharmony | >= 3.1, <= 3.1.2 |
| Openatom | Openharmony | >= 3.0, <= 3.0.6 |
Related Weaknesses (CWE)
References
- https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2Third Party Advisory
- https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2Third Party Advisory
FAQ
What is CVE-2022-44455?
CVE-2022-44455 is a vulnerability with a CVSS score of 6.8 (MEDIUM). The appspawn and nwebspawn services within OpenHarmony-v3.1.2 and prior versions were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation. An unprivileged mali...
How severe is CVE-2022-44455?
CVE-2022-44455 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-44455?
Check the references section above for vendor advisories and patch information. Affected products include: Openharmony Openharmony, Openatom Openharmony.