PT-2024-23749 · Unknown · Openharmony

Published 2024-07-02 · Updated 2024-09-09 · CVE-2024-31071

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions OpenHarmony versions prior to 4.0.0

Description The issue allows a local attacker to cause apps to crash through type confusion.

Recommendations For versions prior to 4.0.0, update to version 4.0.0 or later to resolve the issue.

Fix

Type Confusion

Weakness Enumeration

CWE-843

Related Identifiers

CVE-2024-31071

Affected Products

Openharmony

References · 4

• https://osv.dev/vulnerability/CVE-2024-31071 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-31071 · Security Note
• https://t.me/cvenotify/84972 · Telegram Post
• https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-07.md · Note