CVE-2023-49602

Summary

CVE-2023-49602 is a vulnerability affecting OpenHarmony versions 3.2.4 and earlier. An attacker, who is physically present on the affected system, can exploit this type confusion issue to induce apps to crash. This vulnerability arises due to improper handling of data types, which creates an opportunity for a local attacker to gain unintended control and potentially execute arbitrary code. The impact of this issue includes application instability and potential security risks. Systems running OpenHarmony are urged to update to the latest version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.