PT-2023-15998 · Unknown · Openharmony
CVE-2023-0083
·
Publicado
2023-03-10
·
Atualizado
2024-09-09
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
OpenHarmony versions prior to 3.1.5
OpenHarmony versions prior to 3.0.7
Description
The ArKUI framework subsystem has an Improper Input Validation issue that can be exploited by local attackers to send malicious data, causing the current application to crash.
Recommendations
For OpenHarmony versions prior to 3.1.5, update to a version that includes the fix for this issue.
For OpenHarmony versions prior to 3.0.7, update to a version that includes the fix for this issue.
As a temporary workaround, consider restricting input validation in the ArKUI framework subsystem to minimize the risk of exploitation.
Correção
Type Confusion
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Openharmony