Local attacker can exploit vulnerability to escalate privileges and leak sensitive information

CVE-2024-41157

What is CVE-2024-41157?

A vulnerability in OpenHarmony versions up to v4.1.0 allows a local attacker to escalate privileges by manipulating permissions, potentially gaining root access. This flaw can also lead to sensitive information leakage due to improper memory handling, specifically exploitation through use-after-free scenarios. Security measures should be prioritized to mitigate risks associated with this vulnerability.

References