Description
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenHarmony | OpenHarmony | v4.0.0 – < v4.0.1 | v4.0.1 |
Medium · 5.5
CVE-2024-28951
EUVD-2024-26015GHSA-wfrr-mv2r-fvgp
Arkcompiler runtime has a use after free vulnerability
Published Apr 2, 2024 · Updated Aug 2, 2024 · Assigned by OpenHarmony