High severity8.8NVD Advisory· Published Sep 2, 2024· Updated Jun 17, 2026

CVE-2024-41157

Description

in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use after free.

Affected products

OpenHarmony/Openharmonycpe-rescue
Range: v4.0.0

Patches

Vulnerability mechanics

References

gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-09.mdnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000