← All advisories

High severity8.2NVD Advisory· Published Feb 2, 2024· Updated Jun 17, 2026

CVE-2024-21860

CVE-2024-21860

Description

in OpenHarmony v4.0.0 and prior versions

allow an adjacent attacker arbitrary code execution in any apps through use after free.

Affected products

4

OpenHarmony/Openharmonyllm-fuzzy2 versions
<=4.0.0+ 1 more
- (no CPE)range: <=4.0.0
- (no CPE)range: v3.2.0
Openatom/Openharmony2 versions
cpe:2.3:o:openatom:openharmony:*:*:*:*:-:*:*:*+ 1 more
- cpe:2.3:o:openatom:openharmony:*:*:*:*:-:*:*:*range: >=3.2.0,<=3.2.4
- cpe:2.3:o:openatom:openharmony:4.0:*:*:*:-:*:*:*

Patches

Vulnerability mechanics

References

1

gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-02.mdnvdThird Party Advisory

News mentions

0

No linked articles in our index yet.