CVE-2024-21845

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause heap overflow through integer overflow.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Feb 2, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-218465.3An unauthenticated attacker can reset the board and stop transmitter operations by sending a specially-crafted GET request to the command.cCVE-2024-218483.1Improper Access Control in Mattermost Server versions 8.1.x before 8.1.11 allows an attacker that is in a channel with an active call to keeCVE-2024-218497.5When an Advanced WAF/ASM security policy and a Websockets profile are configured on a virtual server, undisclosed traffic can cause the TrafCVE-2024-21855.4The Beaver Builder Addons by WPZOOM plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Box widget in all versioCVE-2024-218506.0Sensitive information in resource not removed before reuse in some Intel(R) TDX Seamldr module software before version 1.5.02.00 may allow aCVE-2024-218517.8in OpenHarmony v4.0.0 and prior versions allow a local attacker cause heap overflow through integer overflow.CVE-2024-218528.8In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can supply a malicious configuration file by utilizing a ZiCVE-2024-218534.7Improper finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel(R) Xeon(R) Processors may allow an authorizCVE-2024-218559.8A lack of authentication vulnerability exists in the HTTP API functionality of GoCast 1.1.3. A specially crafted HTTP request can lead to arCVE-2024-218576.7Uncontrolled search path for some Intel(R) oneAPI Compiler software before version 2024.1 may allow an authenticated user to potentially enaCVE-2024-218595.3Improper buffer restrictions in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable informationCVE-2024-21865.4The Beaver Builder Addons by WPZOOM plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Team Members widget in all ver
CVE-2024-21845: High severity, CVSS 7.8 | Vulnix