CVE-2023-0083

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-0083
The ArKUI framework subsystem within OpenHarmony-v3.1.5 and prior versions, OpenHarmony-v3.0.7 and prior versions has an Improper Input Validation vulnerability which local attackers can exploit this vulnerability to send malicious data, causing the current application to crash.

4.0 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.5 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-02.md Third Party Advisory
https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-02.md Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:openatom:openharmony:*:*:*:*:lts:*:*:*
cpe:2.3:o:openatom:openharmony:*:*:*:*:-:*:*:*
History

21 Nov 2024, 07:36

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 5.5 		v2 : unknown
v3 : 4.0
References () https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-02.md - Third Party Advisory () https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-02.md - Third Party Advisory

09 Sep 2024, 12:21

Type Values Removed Values Added
CPE cpe:2.3:a:openharmony:openharmony:*:*:*:*:-:*:*:*
cpe:2.3:a:openharmony:openharmony:*:*:*:*:lts:*:*:*		 cpe:2.3:o:openatom:openharmony:*:*:*:*:-:*:*:*
cpe:2.3:o:openatom:openharmony:*:*:*:*:lts:*:*:*
First Time Openatom
Openatom openharmony

07 Nov 2023, 03:59

Type Values Removed Values Added
Summary The ArKUI framework subsystem within OpenHarmony-v3.1.5 and prior versions, OpenHarmony-v3.0.7 and prior versions has an Improper Input Validation vulnerability which local attackers can exploit this vulnerability to send malicious data, causing the current application to crash. The ArKUI framework subsystem within OpenHarmony-v3.1.5 and prior versions, OpenHarmony-v3.0.7 and prior versions has an Improper Input Validation vulnerability which local attackers can exploit this vulnerability to send malicious data, causing the current application to crash.
Information

Published : 2023-03-10 11:15

Updated : 2024-11-21 07:36

NVD link : CVE-2023-0083

Mitre link : CVE-2023-0083

CVE.ORG link : CVE-2023-0083

JSON object : View

Products Affected

openatom

  • openharmony
CWE
CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')