Local Attacker Can Upgrade Permissions and Leak Sensitive Information

CVE-2024-41160

What is CVE-2024-41160?

The vulnerability present in OpenHarmony versions prior to v4.1.0 enables a local attacker to exploit a use-after-free condition that improperly escalates user permissions to root level. This exploitation can lead to unauthorized access to sensitive information stored within the system. It highlights significant security concerns within the OpenHarmony environment, necessitating immediate attention and remedial measures from users and administrators.

References