CVE-2024-21845CWE-190
Dsoftbus has an integer overflow vulnerability
Low · published February 2, 2024
What it is
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause heap overflow through integer overflow.
The record
Technical detail
- CVSS v3.1
- 2.9 · LOW
- Vector
- CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00180 · 7.2th percentile
- Weakness
- CWE-190 · Integer Overflow or Wraparound
- Published
- 2024-02-02T06:18Z
EPSS history
Timeline