Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

OpenHarmony

4.0.0 and prior

Source

scy@openharmony.io

CVE-2024-36278 details

Published : July 2, 2024, 9:15 a.m.
Last Modified : July 2, 2024, 12:09 p.m.

Description

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause apps crash through type confusion.

CVSS Score

1	2	3.3	4	5	6	7	8	9	10

Weakness

Weakness	Name	Description
CWE-843	Access of Resource Using Incompatible Type ('Type Confusion')	The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

CVSS Data

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

Base Score

3.3

Exploitability Score

1.8

Impact Score

1.4

Base Severity

LOW

Vector String : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

References

URL	Source
https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-07.md	scy@openharmony.io

This website uses the NVD API, but is not approved or certified by it.

CVE-2024-36278