Lucene search
OpenHarmonyCVELIST:CVE-2024-38382HistorySep 02, 2024 - 3:24 a.m.
CVE-2024-38382 Ability Runtime has an out-of-bounds read permission bypass vulnerability
2024-09-0203:24:56
CWE-125
CWE-922
OpenHarmony
www.cve.org
2
cve-2024-38382
ability runtime
openharmony
information leak
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0
Percentile
9.5%
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "OpenHarmony",
"vendor": "OpenHarmony",
"versions": [
{
"lessThanOrEqual": "4.0.1",
"status": "affected",
"version": "v4.0.0",
"versionType": "custom"
}
]
}
]Related
vulnrichment
vulnrichment
cve
cve
CVE-2024-38382
2024-09-02 05:15:15
nvd
nvd
CVE-2024-38382
2024-09-02 05:15:15
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0
Percentile
9.5%
Related for CVELIST:CVE-2024-38382