CVE-2023-0083: The ArkUI framework subsystem doesn't check the input parameter,causing type confusion and invalid memory access.

Q: What is CVE-2023-0083?

CVE-2023-0083 refers to an Improper Input Validation vulnerability in the ArKUI framework subsystem within OpenHarmony-v3.1.5 and prior versions.

Q: How can local attackers exploit CVE-2023-0083?

Local attackers can exploit CVE-2023-0083 by sending malicious data, which can cause the current application to crash.

Q: Which versions of OpenHarmony are affected by CVE-2023-0083?

OpenHarmony-v3.1.5, OpenHarmony-v3.0.7, and prior versions are affected by CVE-2023-0083.

Q: What is the severity of CVE-2023-0083?

CVE-2023-0083 has a severity rating of medium with a score of 5.5.

Q: How can I fix CVE-2023-0083?

There is currently no known fix for CVE-2023-0083. It is recommended to apply the latest security patches or upgrade to a version that is not affected.

Published Mar 10, 2023

Updated

The ArKUI framework subsystem within OpenHarmony-v3.1.5 and prior versions,

OpenHarmony-v3.0.7 and prior versions

has an Improper Input Validation vulnerability which local attackers can exploit this vulnerability to send malicious data, causing the current application to crash.

Affected Software

4 affected components

OpenHarmony OpenHarmony>=3.0<=3.0.7

OpenHarmony OpenHarmony>=3.1<=3.1.5

Openatom Openharmony>=3.0<=3.0.7

Openatom Openharmony>=3.1<=3.1.5

Event History

Mar 10, 2023

CVE Published

via MITRE·10:44 AM

Data Sourced

via MITRE·10:44 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2023-0083?

CVE-2023-0083 refers to an Improper Input Validation vulnerability in the ArKUI framework subsystem within OpenHarmony-v3.1.5 and prior versions.

How can local attackers exploit CVE-2023-0083?

Local attackers can exploit CVE-2023-0083 by sending malicious data, which can cause the current application to crash.

Which versions of OpenHarmony are affected by CVE-2023-0083?