← Database

CVE-2023-22436

HIGH CVSS: 7.8 Published: 2023-03-10 Modified: 2026-06-17

Description

The kernel subsystem function check_permission_for_set_tokenid within OpenHarmony-v3.1.5 and prior versions has an UAF vulnerability which local attackers can exploit this vulnerability to escalate the privilege to root.

Affected Platforms

Openatom Openharmony

Weakness Type

CWE-190, CWE-416

References