Vulnerabilities > CVE-2022-36423 - Out-of-bounds Write vulnerability in Openharmony

047910
CVSS 7.4 - HIGH
Attack vector
ADJACENT_NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
low complexity
openharmony
CWE-787

Summary

OpenHarmony-v3.1.2 and prior versions have an incorrect configuration of the cJSON library, which leads a Stack overflow vulnerability during recursive parsing. LAN attackers can lead a DoS attack to all network devices.

Vulnerable Configurations

Part Description Count
Application
Openharmony
2

Common Weakness Enumeration (CWE)