Vulnerabilities > CVE-2024-27217 - Use After Free vulnerability in Openatom Openharmony

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

NVD

Published: 2024-05-07

Updated: 2025-01-02

Summary

in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free.

Part	Description	Count
OS	Openatom Openatom Openharmony - Openatom Openharmony 1.0 Openatom Openharmony 1.1.0 Openatom Openharmony 1.1.1 Openatom Openharmony 1.1.2 Openatom Openharmony 1.1.3 Openatom Openharmony 1.1.4 Openatom Openharmony 1.1.5 Openatom Openharmony 2.0 Openatom Openharmony 2.2 Openatom Openharmony 3.0 Openatom Openharmony 3.0.1 Openatom Openharmony 3.0.2 Openatom Openharmony 3.0.3 Openatom Openharmony 3.0.5 Openatom Openharmony 3.0.6 Openatom Openharmony 3.0.7 Openatom Openharmony 3.0.8 Openatom Openharmony 3.1 Openatom Openharmony 3.1.1 Openatom Openharmony 3.1.2 Openatom Openharmony 3.1.3 Openatom Openharmony 3.1.4 Openatom Openharmony 3.1.5 Openatom Openharmony 3.1.6 Openatom Openharmony 3.2 Openatom Openharmony 3.2.1 Openatom Openharmony 3.2.2 Openatom Openharmony 3.2.3 Openatom Openharmony 3.2.4 Openatom Openharmony 4.0	39