VYPR
← All advisories
Medium severity4.0NVD Advisory· Published Jan 9, 2023· Updated Jun 17, 2026

CVE-2022-45126

CVE-2022-45126

Description

Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGettime. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked.

Affected products

4
  • OpenHarmony/Openharmony3 versions
    cpe:2.3:a:openharmony:openharmony:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:openharmony:openharmony:*:*:*:*:*:*:*:*range: >=3.1.0,<=3.1.4
    • (no CPE)range: <=3.1.4
    • (no CPE)range: 3.1.0
  • Openatom/Openharmony
    cpe:2.3:o:openatom:openharmony:*:*:*:*:lts:*:*:*
    Range: >=1.1.0,<=1.1.5

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.