Description
in OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenHarmony | OpenHarmony | v4.0.0 – ≤ 4.1.0 | — |
High · 8.4
CVE-2024-38386
EUVD-2024-37293GHSA-7w7h-f9x3-q4v4
Arkcompiler Ets Runtime has an out-of-bounds write vulnerability
Published Sep 2, 2024 · Updated Sep 3, 2024 · Assigned by OpenHarmony