CVE-2022-44455: Openatom Openharmony

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

The appspawn and nwebspawn services within OpenHarmony-v3.1.2 and prior versions were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation. An unprivileged malicious application would be able to gain code execution within any application installed on the device or cause application crash.

Affected products

• Openatom Openharmony: from 3.0, up to and including 3.0.6
• Openharmony Openharmony: from 3.1, up to and including 3.1.2

Published 2022-12-08. Last modified 2026-06-17.