CVE-2023-0083 — The ArkUI framework subsystem doesn't check the input parameter,causing type confusion and invalid memory access.

CVE-2023-0083

The ArkUI framework subsystem doesn't check the input parameter,causing type confusion and invalid memory access. PUBLISHED

Description (CNA)

The ArKUI framework subsystem within OpenHarmony-v3.1.5 and prior versions, OpenHarmony-v3.0.7 and prior versions has an Improper Input Validation vulnerability which local attackers can exploit this vulnerability to send malicious data, causing the current application to crash.

Affected (CNA)

Vendor / product	Versions
OpenHarmony / OpenHarmony	affected 3.0 through 3.0.7; affected 3.1 through 3.1.5

CWE

CWE-843

References

https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-02.md

ADP enrichment

CVE

No English description supplied.

https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-02.md

CISA-ADP

No English description supplied.

No references supplied.