First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-54030

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

in OpenHarmony v4.1.2 and prior versions allow a local attacker cause DOS through use after free.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
OpenHarmony	OpenHarmony	>= v4.1.0, <= 4.1.2

References

https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-01.mdVendor Advisory

Timeline

Published: Jan 7, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-540315.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext A CVE-2024-540329.3Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an CVE-2024-540349.3Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able CVE-2024-540369.3Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an CVE-2024-540378.1Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited CVE-2024-540384.3Adobe Connect versions 12.6, 11.4.7 and earlier are affected by an Improper Access Control vulnerability that could result in a Security fea CVE-2024-540395.4Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an CVE-2024-54049.8An unauthenticated remote attacker can change the admin password in a moneo appliance due to weak password recovery mechanism.CVE-2024-540405.4Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an CVE-2024-540415.4Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an CVE-2024-540426.1Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an unauthenticated CVE-2024-540436.1Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an unauthenticated

CVE-2024-54030: Medium severity, CVSS 5.5 | Vulnix