Local Attack Allows for Escalation of Privileges and Sensitive Information Leakage

CVE-2024-47137

What is CVE-2024-47137?

OpenHarmony, an open-source operating system, is vulnerable to a local privilege escalation and information disclosure flaw. In versions prior to v4.1.0, an attacker with local access can exploit this vulnerability, leading to the elevation of common permissions to root. This escalation may facilitate unauthorized access to sensitive information, resulting in potential data leaks. The issue stems from an out-of-bounds write that can be manipulated to affect the system's integrity, highlighting significant security concerns for users and developers. It is essential for stakeholders to review and update their systems to mitigate any potential risks associated with this vulnerability.

References