← CVE Intelligence

CVE-2022-45118

Telephony in communication subsystem sends public events with personal data, but the permission is not set. PUBLISHED

Description (CNA)

OpenHarmony-v3.1.2 and prior versions had a vulnerability that telephony in communication subsystem sends public events with personal data, but the permission is not set. Malicious apps could listen to public events and obtain information such as mobile numbers and SMS data without permissions.

Affected (CNA)

Vendor / productVersions
OpenHarmony / OpenHarmonyaffected 3.1.0

CWE

CWE-287

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.