CVE-2024-47137: Liteos_a has an out-of-bounds Write vulnerability
in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through out-of-bounds write.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47137?
CVE-2024-47137 is considered a high severity vulnerability due to its potential for unauthorized privilege escalation and sensitive information leak.
How do I fix CVE-2024-47137?
To fix CVE-2024-47137, update OpenHarmony to a version later than v4.1.0 that addresses this vulnerability.
What systems are affected by CVE-2024-47137?
CVE-2024-47137 affects OpenHarmony versions 4.1.0 and prior, allowing local attackers to escalate permissions.
What kind of attack does CVE-2024-47137 enable?
CVE-2024-47137 allows a local attacker to perform an out-of-bounds write, potentially upgrading common permissions to root.
Is CVE-2024-47137 easy to exploit?
Exploiting CVE-2024-47137 requires local access to the affected system, which may limit the scope of attackers.