CVE-2024-21860: Dsoftbus has a use after free vulnerability
Published Feb 2, 2024
·Updated
in OpenHarmony v4.0.0 and prior versions
allow an adjacent attacker arbitrary code execution in any apps through use after free.
Affected Software
2 affected components
Openatom Openharmony>=3.2.0<=3.2.4
Openatom Openharmony=4.0
Event History
Feb 2, 2024
CVE Published
via MITRE·06:18 AM
Data Sourced
via MITRE·06:18 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-21860?
CVE-2024-21860 is considered a critical vulnerability due to its potential for arbitrary code execution by adjacent attackers.
2
How do I fix CVE-2024-21860?
To fix CVE-2024-21860, update to OpenHarmony version 4.0.1 or later, or to a version beyond 3.2.4.
3
What types of systems are affected by CVE-2024-21860?
CVE-2024-21860 affects OpenHarmony versions 3.2.0 to 3.2.4 and version 4.0.0.
4
Who can exploit CVE-2024-21860?
CVE-2024-21860 can be exploited by adjacent attackers who can gain access to the vulnerable application.
5
What impact does CVE-2024-21860 have on systems?
CVE-2024-21860 potentially allows attackers to execute arbitrary code within applications, leading to unauthorized actions.