Vulnerability Details CVE-2022-44455
The appspawn and nwebspawn services within OpenHarmony-v3.1.2 and prior versions were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation. An unprivileged malicious application would be able to gain code execution within any application installed on the device or cause application crash.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 16.2%
CVSS Severity
CVSS v3 Score 6.8
References
Products affected by CVE-2022-44455
-
cpe:2.3:a:openharmony:openharmony:3.1
-
cpe:2.3:a:openharmony:openharmony:3.1.1
-
cpe:2.3:a:openharmony:openharmony:3.1.2
-
cpe:2.3:o:openatom:openharmony:3.0
-
cpe:2.3:o:openatom:openharmony:3.0.1
-
cpe:2.3:o:openatom:openharmony:3.0.2
-
cpe:2.3:o:openatom:openharmony:3.0.3
-
cpe:2.3:o:openatom:openharmony:3.0.5
-
cpe:2.3:o:openatom:openharmony:3.0.6