CVE-2024-21816

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through improper preservation of permissions.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-281

Affected software

No affected versions have been published.

Timeline

Published
Mar 4, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-218186.7Uncontrolled search path in some Intel(R) PCM software before version 202311 may allow an authenticated user to potentially enable escalatioCVE-2024-21826.5A flaw was found in the Open Virtual Network (OVN). In OVN clusters where BFD is used between hypervisors for high availability, an attackerCVE-2024-218207.2Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX may allow a privilCVE-2024-218218.0Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port or Wi-Fi to execute aCVE-2024-218237.5Hardware logic with insecure de-synchronization in Intel(R) DSA and Intel(R) IAA for some Intel(R) 4th or 5th generation Xeon(R) processors CVE-2024-218245.3Improper authentication vulnerability in exists in multiple printers and scanners which implement Web Based Management provided by BROTHER ICVE-2024-218259.8A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing functionality of llama.cpp CoCVE-2024-218265.5in OpenHarmony v3.2.4 and prior versions allow a local attacker cause sensitive information leak through insecure storage.CVE-2024-218277.2A leftover debug code vulnerability exists in the cli_server debug functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.4.1 Build 2024CVE-2024-218286.7Improper access control in some Intel(R) Ethernet Controller Administrative Tools software before version 28.3 may allow an authenticated usCVE-2024-218297.5Improper input validation in UEFI firmware error handler for some Intel(R) Processors may allow a privileged user to potentially enable escaCVE-2024-21835.4The Beaver Builder Addons by WPZOOM plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Heading widget in all versions
CVE-2024-21816: Medium severity, CVSS 5.5 | Vulnix