Use After Free Affecting openharmony/kernel_liteos_a package, versions [4.0.0,4.0.2)
Threat Intelligence
EPSS
0.04% (11th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-UNMANAGED-OPENHARMONYKERNELLITEOSA-7856147
- published 2 Sep 2024
- disclosed 2 Sep 2024
- credit Unknown
Introduced: 2 Sep 2024
CVE-2024-41160 Open this link in a new tabHow to fix?
Upgrade openharmony/kernel_liteos_a to version 4.0.2 or higher.
Overview
Affected versions of this package are vulnerable to Use After Free through the use of freed memory. An attacker can escalate privileges and leak sensitive information by exploiting this vulnerability. This is only exploitable if the common permission is upgraded to root.