CVE-2023-0083
Published Mar 10, 2023
Last updated 2 months ago
Overview
- Description
- The ArKUI framework subsystem within OpenHarmony-v3.1.5 and prior versions, OpenHarmony-v3.0.7 and prior versions has an Improper Input Validation vulnerability which local attackers can exploit this vulnerability to send malicious data, causing the current application to crash.
- Source
- scy@openharmony.io
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 5.5
- Impact score
- 3.6
- Exploitability score
- 1.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Severity
- MEDIUM
Configurations
[ { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:openatom:openharmony:*:*:*:*:lts:*:*:*", "vulnerable": true, "matchCriteriaId": "A6890018-CA05-41A8-B061-19B45BFD5281", "versionEndIncluding": "3.0.7", "versionStartIncluding": "3.0" }, { "criteria": "cpe:2.3:o:openatom:openharmony:*:*:*:*:-:*:*:*", "vulnerable": true, "matchCriteriaId": "CD89B217-1A7D-485D-B647-5C666FBA5D46", "versionEndIncluding": "3.1.5", "versionStartIncluding": "3.1" } ], "operator": "OR" } ] } ]