Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-43495 EUVD-2022-46493GHSA-mgr9-pm96-3xmm

An abnormal packet recieved when distributedhardware_device_manager joining a network could cause a device reboot.

Published Nov 3, 2022 · Updated Apr 30, 2025 · Assigned by OpenHarmony

Description

OpenHarmony-v3.1.2 and prior versions had a DOS vulnerability in distributedhardware_device_manager when joining a network. Network attakcers can send an abonormal packet when joining a network, cause a nullptr reference and device reboot.

Affected products

VendorProductAffectedFixed
OpenHarmony OpenHarmony 3.1.0 —

References