Local Attack Leads to Rooted Access and Sensitive Information Leak

CVE-2024-47404

What is CVE-2024-47404?

A vulnerability in OpenHarmony versions up to and including v4.1.0 allows a local attacker to escalate privileges through a double-free flaw. This issue enables unauthorized elevation to root level permissions, which may lead to significant security breaches, including the potential for sensitive information exposure. Precaution must be taken to mitigate risks associated with this vulnerability.

References