high7.4
CVE-2022-36423
OpenHarmony-v3.1.2 and prior versions have an incorrect configuration of the cJSON library, which leads a Stack overflow vulnerability during recursive parsing.
Impact
OpenHarmony-v3.1.2 and prior versions have an incorrect configuration of the cJSON library, which leads a Stack overflow vulnerability during recursive parsing. LAN attackers can lead a DoS attack to all network devices.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openharmony | Openharmony | from 1.1.0 through 1.1.5 from 3.0 through 3.0.5 |
| Openatom | Openharmony | from 3.1 through 3.1.2 |