PT-2023-19623 · Unknown · Openharmony

Published 2023-03-10 · Updated 2024-09-09 · CVE-2023-24465

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions OpenHarmony versions prior to 3.1.4 OpenHarmony versions prior to 3.0.7

Description The Communication Wi-Fi subsystem has a null pointer reference issue that can be exploited by local attackers to cause the current application to crash.

Recommendations For versions prior to 3.1.4, update to a version later than 3.1.4 to resolve the issue. For versions prior to 3.0.7, update to a version later than 3.0.7 to resolve the issue.

Fix

RCE

NULL Pointer Dereference

Weakness Enumeration

CWE-20

CWE-476

Related Identifiers

CVE-2023-24465

Affected Products

Openharmony

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2023-24465 · Security Note
• https://osv.dev/vulnerability/CVE-2023-24465 · Vendor Advisory
• https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-03.md · Note