CVE-2024-22177

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Apr 2, 2024
Updated: Jan 2, 2025
CWE ID 281

Summary

CVE-2024-22177 is a newly disclosed vulnerability affecting OpenHarmony versions 3.2.4 and older. This issue permits a local attacker to cause apps to crash by manipulating permission requests. By exploiting this weakness, an adversary can potentially gain unintended control over application functionality, leading to denial-of-service conditions or potentially more severe consequences. System administrators are advised to update their OpenHarmony installations to the latest version as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share