Description
in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through type confusion.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenHarmony | OpenHarmony | v3.2.0 – ≤ v3.2.2 | — |
Medium · 5.9
CVE-2023-6045
EUVD-2023-58302GHSA-cv6h-7p3x-q58x
Arkruntime has a type confusion vulnerability
Published Nov 20, 2023 · Updated Aug 14, 2024 · Assigned by OpenHarmony