CVE-2023-49602
EUVD-2023-5355004.03.2024, 07:15
in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through type confusion.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| openatom | openharmony | 3.2 ≤ 𝑥 ≤ 3.2.4 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-125 - Out-of-bounds ReadThe software reads data past the end, or before the beginning, of the intended buffer.
- CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')The program allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.