CVE-2023-25947 — The bundle management subsystem has a improper input validation when installing a HAP package.

CVE-2023-25947

The bundle management subsystem has a improper input validation when installing a HAP package. PUBLISHED

Description (CNA)

The bundle management subsystem within OpenHarmony-v3.1.4 and prior versions has a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause a DoS attack to the system when installing a malicious HAP package.

Affected (CNA)

Vendor / product	Versions
OpenHarmony / OpenHarmony	affected 3.1 through 3.1.4

CWE

CWE-20

References

https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-03.md

ADP enrichment

CVE

No English description supplied.

https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-03.md

CISA-ADP

No English description supplied.

No references supplied.