Описание
in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow. This vulnerability can be exploited only in restricted scenarios.
Ссылки
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 4.1 (включая) до 5.0.2 (включая)
cpe:2.3:o:openatom:openharmony:*:*:*:*:*:*:*:*
EPSS
Процентиль: 7%
0.00027
Низкий
3.8 Low
CVSS3
7.8 High
CVSS3
Дефекты
CWE-190
Связанные уязвимости
CVSS3: 3.8
github
11 месяцев назад
in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow. This vulnerability can be exploited only in restricted scenarios.
EPSS
Процентиль: 7%
0.00027
Низкий
3.8 Low
CVSS3
7.8 High
CVSS3
Дефекты
CWE-190