CVE-2022-45126: Openatom Openharmony

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGettime. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked.

Affected products

• Openatom Openharmony: from 1.1.0, up to and including 1.1.5; from 3.0, up to and including 3.0.6
• Openharmony Openharmony: from 3.1.0, up to and including 3.1.4

Published 2023-01-09. Last modified 2026-06-17.