Description
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenHarmony | OpenHarmony | v4.0.0 – < v4.0.1 | v4.0.1 |
Medium · 6.5
CVE-2024-27217
EUVD-2024-24456GHSA-pq5j-cmm3-64mg
MSDP has a use after free vulnerability
Published May 7, 2024 · Updated Aug 2, 2024 · Assigned by OpenHarmony