← CVE Intelligence

CVE-2022-45126

Kernel subsystem in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGettime. PUBLISHED

Description (CNA)

Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGettime. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked.

Affected (CNA)

Vendor / productVersions
OpenHarmony / OpenHarmonyaffected 3.1.0 through 3.1.4; affected 3.0.0 through 3.0.6; affected 1.1.0 through 1.1.5

CWE

CWE-120

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.