VYPR
← All advisories
High severity7.4NVD Advisory· Published Sep 9, 2022· Updated Jun 17, 2026

CVE-2022-36423

CVE-2022-36423

Description

OpenHarmony-v3.1.2 and prior versions have an incorrect configuration of the cJSON library, which leads a Stack overflow vulnerability during recursive parsing. LAN attackers can lead a DoS attack to all network devices.

Affected products

4
  • OpenHarmony/Openharmonyllm-fuzzy3 versions
    <=3.1.2+ 2 more
    • (no CPE)range: <=3.1.2
    • (no CPE)range: OpenHarmony-v3.1.x-Release
    • cpe:2.3:a:openharmony:openharmony:*:*:*:*:long_term_support:*:*:*range: >=1.1.0,<=1.1.5
  • Openatom/Openharmony
    cpe:2.3:o:openatom:openharmony:*:*:*:*:-:*:*:*
    Range: >=3.1,<=3.1.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.