CVE-2024-21860CWE-416

Dsoftbus has a use after free vulnerability

High · published February 2, 2024

CVSS v3.1
8.2
EPSS
0%
Percentile
33.2
In the wild
Unconfirmed
What it is

in OpenHarmony v4.0.0 and prior versions

allow an adjacent attacker arbitrary code execution in any apps through use after free.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00401 · 33.2th percentile
Weakness
CWE-416 · Use After Free
Published
2024-02-02T06:18Z
EPSS history
Timeline
  • 02 FEB 06:18Z
    Dsoftbus has a use after free vulnerability
    cvelistv5