TI-2024-03505 CVE-2024-3759 · GHSA-m3qq-5j3g-rq9q
Hmdfs has a use after free vulnerability
Priority LOW 33
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through use after free.
Vulnerabilities
6 records
TI-2024-03504 CVE-2024-3758 · GHSA-mqmq-vr52-c53r
Hmdfs has a heap buffer overflow vulnerability
Priority LOW 33
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through heap buffer overflow.
TI-2024-03503 CVE-2024-3757 · GHSA-p7p2-vf3x-m7fp
Arkcompiler runtime has an integer overflow vulnerability
Priority LOW 24
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through integer overflow.
TI-2024-20467 CVE-2024-31078 · GHSA-mqgc-wwff-qc9q
Bluetooth Service has a use after free vulnerability
Priority LOW 24
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through NULL pointer dereference.
TI-2024-15802 CVE-2024-23808 · GHSA-cf65-84fr-hwv4
Arkcompiler ets frontend has an out-of-bounds read vulnerability
Priority LOW 33
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free or cause DOS through NULL pointer dereference.
TI-2024-18068 CVE-2024-27217 · GHSA-pq5j-cmm3-64mg
MSDP has a use after free vulnerability
Priority LOW 35
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free.