diff --git a/advisories/unreviewed/2024/01/GHSA-c7vw-6rwx-xwr2/GHSA-c7vw-6rwx-xwr2.json b/advisories/unreviewed/2024/01/GHSA-c7vw-6rwx-xwr2/GHSA-c7vw-6rwx-xwr2.json new file mode 100644 index 00000000000..9bebebd6173 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-c7vw-6rwx-xwr2/GHSA-c7vw-6rwx-xwr2.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-c7vw-6rwx-xwr2", + "modified": "2024-01-02T09:30:29Z", + "published": "2024-01-02T09:30:29Z", + "aliases": [ + "CVE-2023-49142" + ], + "details": "\nin OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia audio crash through modify a released pointer.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-49142" + }, + { + "type": "WEB", + "url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-01.md" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-416" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-02T08:15:10Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-c8h7-p2qv-9hq3/GHSA-c8h7-p2qv-9hq3.json b/advisories/unreviewed/2024/01/GHSA-c8h7-p2qv-9hq3/GHSA-c8h7-p2qv-9hq3.json new file mode 100644 index 00000000000..56a09e70f8e --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-c8h7-p2qv-9hq3/GHSA-c8h7-p2qv-9hq3.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-c8h7-p2qv-9hq3", + "modified": "2024-01-02T09:30:29Z", + "published": "2024-01-02T09:30:29Z", + "aliases": [ + "CVE-2023-48360" + ], + "details": "\nin OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-48360" + }, + { + "type": "WEB", + "url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-01.md" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-416" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-02T08:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-qg73-f9vv-77ph/GHSA-qg73-f9vv-77ph.json b/advisories/unreviewed/2024/01/GHSA-qg73-f9vv-77ph/GHSA-qg73-f9vv-77ph.json new file mode 100644 index 00000000000..d4aa5b63044 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-qg73-f9vv-77ph/GHSA-qg73-f9vv-77ph.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qg73-f9vv-77ph", + "modified": "2024-01-02T09:30:29Z", + "published": "2024-01-02T09:30:29Z", + "aliases": [ + "CVE-2023-47216" + ], + "details": "\nin OpenHarmony v3.2.2 and prior versions allow a local attacker cause DOS through occupy all resources\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-47216" + }, + { + "type": "WEB", + "url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-01.md" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-772" + ], + "severity": "LOW", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-02T08:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-rrpw-696f-x5x7/GHSA-rrpw-696f-x5x7.json b/advisories/unreviewed/2024/01/GHSA-rrpw-696f-x5x7/GHSA-rrpw-696f-x5x7.json new file mode 100644 index 00000000000..eaa48f0ab91 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-rrpw-696f-x5x7/GHSA-rrpw-696f-x5x7.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-rrpw-696f-x5x7", + "modified": "2024-01-02T09:30:29Z", + "published": "2024-01-02T09:30:29Z", + "aliases": [ + "CVE-2023-49135" + ], + "details": "\nin OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-49135" + }, + { + "type": "WEB", + "url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-01.md" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-416" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-02T08:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-vhvx-m929-m6jc/GHSA-vhvx-m929-m6jc.json b/advisories/unreviewed/2024/01/GHSA-vhvx-m929-m6jc/GHSA-vhvx-m929-m6jc.json new file mode 100644 index 00000000000..3cc130b668f --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-vhvx-m929-m6jc/GHSA-vhvx-m929-m6jc.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-vhvx-m929-m6jc", + "modified": "2024-01-02T09:30:29Z", + "published": "2024-01-02T09:30:29Z", + "aliases": [ + "CVE-2023-47857" + ], + "details": "\nin OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia camera crash through modify a released pointer.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-47857" + }, + { + "type": "WEB", + "url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-01.md" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-416" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-02T08:15:09Z" + } +} \ No newline at end of file