CVE-2023-6045: Arkruntime has a type confusion vulnerability
Published Nov 20, 2023
·Updated
in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through type confusion.
Affected Software
1 affected component
Openatom Openharmony<=3.2.2
Event History
Nov 20, 2023
CVE Published
11:46 AM
Data Sourced
11:46 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2023-6045?
CVE-2023-6045 is a type confusion vulnerability in OpenHarmony v3.2.2 and prior versions.
2
How does CVE-2023-6045 impact OpenHarmony?
CVE-2023-6045 allows a local attacker to execute arbitrary code in pre-installed apps through type confusion.
3
What is the severity of CVE-2023-6045?
The severity of CVE-2023-6045 is high with a CVSS score of 7.8.
4
How can I fix CVE-2023-6045?
To fix CVE-2023-6045, update your OpenHarmony installation to version 3.2.3 or later.
5
Where can I find more information about CVE-2023-6045?
You can find more information about CVE-2023-6045 in the OpenHarmony security disclosure page: https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2023/2023-12.md