- Description
- in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use after free.
- Source
- scy@openharmony.io
- NVD status
- Analyzed
CVSS 3.1
- Type
- Primary
- Base score
- 7.8
- Impact score
- 5.9
- Exploitability score
- 1.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
- scy@openharmony.io
- CWE-416
- Hype score
- Not currently trending
New post from https://t.co/uXvPWJy6tj (CVE-2025-0304 | OpenHarmony up to 4.1.2 use after free) has been published on https://t.co/7AEfEPyX2V
@WolfgangSesin
7 Feb 2025
10 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-0304 in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use after free. https://t.co/x7PcAvaDPY
@CVEnew
7 Feb 2025
177 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[CVE-2025-0304: HIGH] in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use after free.#cybersecurity,#vulnerability https://t.co/p3lGYEJXkI https://t.co/siwpWAhCWf
@CveFindCom
7 Feb 2025
40 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:openatom:openharmony:*:*:*:*:-:*:*:*",
"vulnerable": true,
"matchCriteriaId": "027A2297-6F9B-4CB9-A126-56825CCC14BA",
"versionEndIncluding": "4.1.2",
"versionStartIncluding": "4.1.0"
}
],
"operator": "OR"
}
]
}
]