Skip to content
OpenAdvisories
High · 7.4 CVE-2022-36423 EUVD-2022-39135GHSA-2cf7-6ggv-hfxq

Incorrect configuration of the cJSON library lead a Stack overflow vulnerability during recursive parsing. LAN attackers can lead a DoS attack to all network devices.

Published Sep 9, 2022 · Updated Sep 17, 2024 · Assigned by OpenHarmony

Vendor: OpenHarmony Product: OpenHarmony

Description

OpenHarmony-v3.1.2 and prior versions have an incorrect configuration of the cJSON library, which leads a Stack overflow vulnerability during recursive parsing. LAN attackers can lead a DoS attack to all network devices.

Affected products

VendorProductAffectedFixed
OpenHarmony OpenHarmony OpenHarmony-v3.1.x-Release – ≤ 3.1.2, OpenHarmony-v3.0.x-LTS – ≤ 3.0.5, OpenHarmony-v1.1.x-LTS – ≤ 1.1.5 —

References