What’s Vulnerable › Vulnerabilities

CVE-2022-44455: The appspawn and nwebspawn services were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation.

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-12-08 · updated 2026-06-17
• Weakness: CWE-120

Description

The appspawn and nwebspawn services within OpenHarmony-v3.1.2 and prior versions were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation. An unprivileged malicious application would be able to gain code execution within any application installed on the device or cause application crash.

Affected products

• OpenHarmony: from 3.0 through 3.0.6
• Openharmony: from 3.1 through 3.1.2

References

• https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-12.md
• https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-12.md

Get alerted when CVE-2022-44455 or the next vulnerability affects your stack