Vulnerability · Published Dec 8, 2022 · Assigned by OpenHarmony
CVE-2022-44455The appspawn and nwebspawn services were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation.
Medium 6.8
In plain English
A medium-severity buffer overflow in OpenHarmony from OpenHarmony. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities).
Severity (CVSS 3.1)6.8Medium
Exploit odds (30 days)0.2%top 87.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The appspawn and nwebspawn services within OpenHarmony-v3.1.2 and prior versions were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation. An unprivileged malicious application would be able to gain code execution within any application installed on the device or cause application crash.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| OpenHarmony | OpenHarmony | 3.1.03.0.0 |
Weakness: CWE-120 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L