Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2024-21860

Dsoftbus has a use after free vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OpenHarmony

Description

in OpenHarmony v4.0.0 and prior versions allow an adjacent attacker arbitrary code execution in any apps through use after free.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenHarmony OpenHarmony

Default version status: unaffected

  • v3.2.0 to ≤ v3.2.4affected
  • v4.0.0 to < v4.0.1affected

References