Vulnerabilities

TI-2024-14532 CVE-2024-21863 · GHSA-6gmm-6q8h-c7mm

Dsoftbus has an improper input validation vulnerability

LOW 27

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through improper input.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00179 Published 2024-02-02 Fixed in v4.0.1 CWE-20

TI-2024-14523 CVE-2024-21851 · GHSA-3mwh-2gfv-6wv5

LOW 33

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause heap overflow through integer overflow.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00154 Published 2024-02-02 Fixed in v4.0.1 CWE-190

TI-2024-00260 CVE-2024-0285 · GHSA-89fw-fqph-63fm

LOW 24

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through improper input.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0017 Published 2024-02-02 Fixed in v4.0.1 CWE-20

TI-2024-14529 CVE-2024-21860 · GHSA-44qh-gw8j-g2gv

MEDIUM 40

in OpenHarmony v4.0.0 and prior versions allow an adjacent attacker arbitrary code execution in any apps through use after free.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00401 Published 2024-02-02 Fixed in v4.0.1 CWE-416

TI-2024-14518 CVE-2024-21845 · GHSA-hmwv-4vph-2r3h

LOW 33

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause heap overflow through integer overflow.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0018 Published 2024-02-02 Fixed in v4.0.1 CWE-190