Description
in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any apps through use after free.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenHarmony | OpenHarmony | v3.2.0 – ≤ v3.2.4 | — |
Medium · 6.5
CVE-2024-22098
EUVD-2024-19694GHSA-47g7-w4cj-342g
AVSession has a use after free vulnerability
Published Apr 2, 2024 · Updated Aug 1, 2024 · Assigned by OpenHarmony