CVE-2024-10074

in OpenHarmony v4.1.1 and prior versions allow a local attacker cause the common permission is upgraded to root through use after free.

CVE-2024-9978

in OpenHarmony v4.1.1 and prior versions allow a local attacker cause information leak through out-of-bounds Read.

CVE-2024-12082

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read.