CVE-2023-0083

The ArkUI framework subsystem doesn't check the input parameter,causing type confusion and invalid memory access.

State: Published
Severity: 4.0 Medium
Published: Mar 10, 2023
Updated: Feb 27, 2025
Reserved: Jan 5, 2023

Description

The ArKUI framework subsystem within OpenHarmony-v3.1.5 and prior versions,

OpenHarmony-v3.0.7 and prior versions

has an Improper Input Validation vulnerability which local attackers can exploit this vulnerability to send malicious data, causing the current application to crash.

Scores

CVSS	Score	Vector	Source
3.1	4.0 Medium	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	OpenHarmony

Weaknesses

CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')

Affected Products

Product	Versions
OpenHarmonyOpenHarmony	3.0 through 3.0.7Affected 3.1 through 3.1.5Affected

References

https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-02.md

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.