Vulnerabilities > CVE-2024-22098 - Use After Free vulnerability in Openatom Openharmony

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

NVD

Published: 2024-04-02

Updated: 2025-01-02

Summary

in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any apps through use after free.

Part	Description	Count
OS	Openatom Openatom Openharmony - Openatom Openharmony 1.0 Openatom Openharmony 1.1.0 Openatom Openharmony 1.1.1 Openatom Openharmony 1.1.2 Openatom Openharmony 1.1.3 Openatom Openharmony 1.1.4 Openatom Openharmony 1.1.5 Openatom Openharmony 2.0 Openatom Openharmony 2.2 Openatom Openharmony 3.0 Openatom Openharmony 3.0.1 Openatom Openharmony 3.0.2 Openatom Openharmony 3.0.3 Openatom Openharmony 3.0.5 Openatom Openharmony 3.0.6 Openatom Openharmony 3.0.7 Openatom Openharmony 3.0.8 Openatom Openharmony 3.1 Openatom Openharmony 3.1.1 Openatom Openharmony 3.1.2 Openatom Openharmony 3.1.3 Openatom Openharmony 3.1.4 Openatom Openharmony 3.1.5 Openatom Openharmony 3.1.6 Openatom Openharmony 3.2 Openatom Openharmony 3.2.1 Openatom Openharmony 3.2.2 Openatom Openharmony 3.2.3 Openatom Openharmony 3.2.4	36