Description
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free or cause DOS through NULL pointer dereference.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenHarmony | OpenHarmony | v4.0.0 – < v4.0.1 | v4.0.1 |