Vulnerability Database

300,214

Total vulnerabilities in the database

CVE-2022-45118

OpenHarmony-v3.1.2 and prior versions had a vulnerability that telephony in communication subsystem sends public events with personal data, but the permission is not set. Malicious apps could listen to public events and obtain information such as mobile numbers and SMS data without permissions.

  • Published: Dec 8, 2022
  • Updated: Apr 14, 2023
  • CVE: CVE-2022-45118
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.5
  • AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWEs:

Software From Fixed in
openharmony / openharmony 3.1 3.1.4.x