漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
The appspawn and nwebspawn services were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation.
Vulnerability Description
The appspawn and nwebspawn services within OpenHarmony-v3.1.2 and prior versions were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation. An unprivileged malicious application would be able to gain code execution within any application installed on the device or cause application crash.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
Vulnerability Type
未进行输入大小检查的缓冲区拷贝(传统缓冲区溢出)
Vulnerability Title
OpenHarmony 安全漏洞
Vulnerability Description
OpenHarmony是中国开放原子开源基金会（OpenAtom Foundation）基金会的一种鸿蒙操作系统的开源项目。 OpenHarmony startup_appspawn存在安全漏洞，该漏洞源于输入验证不充分而容易受到缓冲区溢出，攻击者利用该漏洞可以在设备上安装的任何应用程序中执行代码或导致应用程序崩溃，以下产品和版本受到影响：OpenHarmony-v3.1-Release 到 OpenHarmony-v3.1.2-Release版本、OpenHarmony-v3.0-LTS 到 OpenH
CVSS Information
N/A
Vulnerability Type
N/A