CVE-2023-24465CWE-20
Communication Wi-Fi subsystem has a null pointer reference vulnerability when receving external data.
Medium · published March 10, 2023
What it is
Communication Wi-Fi subsystem within OpenHarmony-v3.1.4 and prior versions, OpenHarmony-v3.0.7 and prior versions
has a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause the current application to crash.
The record
Technical detail
- CVSS v3.1
- 5.5 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00157 · 4.5th percentile
- Weakness
- CWE-20 · Improper Input Validation
- Published
- 2023-03-10T10:45Z
EPSS history
Timeline