CVE-2022-43662

Publication date

2023-01-09 02:23:02

Family

OpenHarmony

State

PUBLISHED

Description

Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysTimerGettime. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked.