Skip to content
OpenAdvisories
Medium · 4.0 CVE-2023-0083 EUVD-2023-12184GHSA-whc8-x8vc-w8v2

The ArkUI framework subsystem doesn't check the input parameter,causing type confusion and invalid memory access.

Published Mar 10, 2023 · Updated Feb 27, 2025 · Assigned by OpenHarmony

Description

The ArKUI framework subsystem within OpenHarmony-v3.1.5 and prior versions,

OpenHarmony-v3.0.7 and prior versions

has an Improper Input Validation vulnerability which local attackers can exploit this vulnerability to send malicious data, causing the current application to crash.

Affected products

VendorProductAffectedFixed
OpenHarmony OpenHarmony 3.0 – ≤ 3.0.7, 3.1 – ≤ 3.1.5 —

References