CVE-2023-46705

Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)

Published: Nov 20, 2023 / Updated: 12mo ago

010
CVSS 5.5EPSS 0.04%Medium
CVE info copied to clipboard

in OpenHarmony v3.2.2 and prior versions allow a local attacker causes system information leak through type confusion.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Timeline

CVE Assignment

NVD published the first details for CVE-2023-46705

Nov 20, 2023 at 12:15 PM
First Article

Feedly found the first article mentioning CVE-2023-46705. See article

Nov 20, 2023 at 12:49 PM / VulDB Recent Entries
CVSS Estimate

Feedly estimated the CVSS score as MEDIUM

Nov 20, 2023 at 12:49 PM
EPSS

EPSS Score was set to: 0.04% (Percentile: 5.7%)

Nov 22, 2023 at 5:05 PM
Static CVE Timeline Graph

Affected Systems

Openharmony/openharmony
+null more

CVSS V3.1

Attack Vector:Local
Attack Complexity:Low
Privileges Required:Low
User Interaction:None
Scope:Unchanged
Confidentiality:High
Integrity:None
Availability Impact:None

Categories

Be the first to know about critical vulnerabilities

Collect, analyze, and share vulnerability reports faster using AI