← All advisories

Low severity2.9NVD Advisory· Published Feb 2, 2024· Updated Jun 17, 2026

CVE-2024-21851

CVE-2024-21851

Description

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause heap overflow through integer overflow.

Affected products

4

Openatom/Openharmony2 versions
cpe:2.3:o:openatom:openharmony:*:*:*:*:-:*:*:*+ 1 more
- cpe:2.3:o:openatom:openharmony:*:*:*:*:-:*:*:*range: >=3.2.0,<=3.2.4
- cpe:2.3:o:openatom:openharmony:4.0:*:*:*:-:*:*:*
OpenHarmony/Openharmonyllm-fuzzy2 versions
<=4.0.0+ 1 more
- (no CPE)range: <=4.0.0
- (no CPE)range: v3.2.0

Patches

Vulnerability mechanics

References

1

gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-02.mdnvdThird Party Advisory

News mentions

0

No linked articles in our index yet.