CVE-2022-36423: Openatom Openharmony

High severity, CVSS 7.4. EPSS: 0.3% chance of exploitation in the next 30 days.

OpenHarmony-v3.1.2 and prior versions have an incorrect configuration of the cJSON library, which leads a Stack overflow vulnerability during recursive parsing. LAN attackers can lead a DoS attack to all network devices.

Affected products

• Openatom Openharmony: from 3.1, up to and including 3.1.2
• Openharmony Openharmony: from 1.1.0, up to and including 1.1.5; from 3.0, up to and including 3.0.5

Published 2022-09-09. Last modified 2026-06-17.