Security Advisory

CVE-2022-45118

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-12-08 00:00:00

Last updated 2024-08-03 14:01:31

Assigner OpenHarmony

State PUBLISHED

Description

OpenHarmony-v3.1.2 and prior versions had a vulnerability that telephony in communication subsystem sends public events with personal data, but the permission is not set. Malicious apps could listen to public events and obtain information such as mobile numbers and SMS data without permissions.

← Browse all CVEs View on cve.org ↗