Vulnerabilities > CVE-2024-41160 - Use After Free vulnerability in Openatom Openharmony

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

openatom

CWE-416

NVD

Published: 2024-09-02

Updated: 2024-09-09

Summary

in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use after free.

Vulnerable Configurations

Part	Description	Count
OS	Openatom Openatom Openharmony 1.0 Openatom Openharmony 2.0 Openatom Openharmony 2.2 Openatom Openharmony 3.1 Openatom Openharmony 3.1.1 Openatom Openharmony 3.1.2 Openatom Openharmony 3.1.3 Openatom Openharmony 3.1.4 Openatom Openharmony 3.1.5 Openatom Openharmony 3.1.6 Openatom Openharmony 3.2 Openatom Openharmony 3.2.1 Openatom Openharmony 3.2.2 Openatom Openharmony 3.2.3 Openatom Openharmony 3.2.4 Openatom Openharmony 4.0	21

Common Weakness Enumeration (CWE)

CWE-416 - Use After Free

References

https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-09.md