Buffer Overflow Vulnerability in OpenHarmony-v3.1.2 and Prior Versions: Exploiting Appspawn and Nwebspawn Services

CVE-2022-44455 · HIGH Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

The appspawn and nwebspawn services within OpenHarmony-v3.1.2 and prior versions were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation. An unprivileged malicious application would be able to gain code execution within any application installed on the device or cause application crash.

Learn more about our Web App Pen Testing.