← All advisories

Low severity2.9NVD Advisory· Published Feb 2, 2024· Updated Jun 17, 2026

CVE-2024-21845

CVE-2024-21845

Description

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause heap overflow through integer overflow.

Affected products

4

OpenHarmony/Openharmonyllm-fuzzy2 versions
<=4.0.0+ 1 more
- (no CPE)range: <=4.0.0
- (no CPE)range: v3.2.0
Openatom/Openharmony2 versions
cpe:2.3:o:openatom:openharmony:*:*:*:*:-:*:*:*+ 1 more
- cpe:2.3:o:openatom:openharmony:*:*:*:*:-:*:*:*range: >=3.2.0,<=3.2.4
- cpe:2.3:o:openatom:openharmony:4.0:*:*:*:-:*:*:*

Patches

Vulnerability mechanics

References

1

gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-02.mdnvdThird Party Advisory

News mentions

0

No linked articles in our index yet.